Hi,

We are using pub.client.http to invoke a web service - https://www.postcode.nl/planner.php

Request from unix(server) using wget is working fine, we are getting proper response as well.
We are able to invoke the webservice via Browser as well.

But when we invoke the same request from webMethods, we are getting connection timed out.

We checked at network, request is going out to target. No issue with connectivity.

This was working fine till 10th May. since target has updated the SSL setting. We are facing this issue only from webMethods.

Here are SSL report to the target from browser - https://www.ssllabs.com/ssltest/analyze.html?d=ah-clients.postcode.nl&hideResults=on

Target Github rest client details - GitHub - postcode-nl/PostcodeNl_Api_RestClient: Deprecated client library, replaced by PostcodeNl_Api_Client

Integration server details:

Version - 9.6.0.0
Updates - IS_9.6_Core_Fix6
IS_9.6_Core_Fix5
TNS_9.6_Fix5
Build Number - 294
SSL - Strong (128-bit)

Server env details:
Java Version 1.7.0_51 (51.0)
Java VM Name Java HotSpot™ 64-Bit Server VM
Java Build Info 24.51-b03, mixed mode
Java Vendor Oracle Corporation
Java Home /appl/dev/wmadmin/vendor/wm96/IS1/jvm/jvm/jre
Java Entrust Toolkit Version Entrust Authority™ Security Toolkit for the Java(R) Platform version 8.0 Patch 192190 FIPS
Data Direct Version 5.1
Server Process Id 27661

Could you please advice.

-Pawan

Hi Pawan.

can you provide a list fo your extended settings JSSE and SSL minmum and maximum protocol versions please?

A list of applied Fixes for IS_Core and SCG_Entrust will also be helpful.

Please elaborate what exactly has been changed on the ssl settings.

Are there any additional error messages like “ChainVerifiier” or “unsupported protool”?
These migth indicate that you have to add additional ca certificates to your truststore or that you are trying use a protocol no longer supported by the target in your ssl handshake.

Regards,
Holger