SSL connections to data sources don't work when RadiantOne is in FIPS-mode

PROBLEM: SSL connections to data sources don't work when RadiantOne v7.4.10 is in FIPS-mode. The following error is seen in vds_server.log: javax.net.ssl.SSLHandshakeException: No available authentication scheme

This problem can be seen in RadiantOne v7.4.2-7.4.10 depending on the TLS version the backend data source tries to negotiate during the handshake. If it uses TLS 1.3, the error occurs because the security library used for RadiantOne FIPS-mode doesn't support TLS v1.3 yet. Support is expected by the end of 2024.

 

SOLUTION: This issue has been fixed starting in v7.4.11 to avoid using TLS v1.3 in the handshake. Support for TLS 1.3 while running in FIPS-mode is expected by the end of 2024.

Was this article helpful?
1 out of 1 found this helpful

Comments

0 comments

Please sign in to leave a comment.

Articles in this section