API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  TLS Library Error

    Posted Mon August 19, 2024 07:21 AM

    Hi Team 

    I am calling and api getting this "error could not connect to the endpoint" when i check the connectivity it's successfully.

    But when i check datapower log it give an "TLS library Error"

    kindly give me the solution of this error 

    Thhankyou



    ------------------------------
    Shah Wajahat
    ------------------------------


  • 2.  RE: TLS Library Error

    Posted Thu August 22, 2024 01:34 AM

    Dear Team

    any suggestion on it



    ------------------------------
    Shah Wajahat
    ------------------------------



  • 3.  RE: TLS Library Error

    Posted Thu August 22, 2024 02:01 AM

    Hi Shah,

    TLS library error: error:141E3152:SSL routines:final_renegotiate:unsafe legacy renegotiation disabled

    The above error message indicates that there is an issue with SSL renegotiation between DataPower gateway and target server

    I guess target URL is with HTTPS protocol, and you didn't specify a TLS Client Profile in the Invoke policy which has "Pemit connections without renegotiation" selected. 



    ------------------------------
    Nirmalan
    ------------------------------



  • 4.  RE: TLS Library Error

    Posted Thu August 22, 2024 02:34 AM

    you mean i need tls client certificate for this



    ------------------------------
    Shah Wajahat
    ------------------------------



  • 5.  RE: TLS Library Error

    Posted Thu August 22, 2024 04:02 AM

    Hi Shah,

    No, please go to the Invoke policy and select a custom TLS Client Profile that has "Pemit connections without renegotiation" selected.

    Please check below links to create a custom TLS Profile if you don't have any TLS Profile in API Manager. Then you need to enable the TLS client profile in your Catalogs as required.

    https://www.ibm.com/docs/en/api-connect/10.0.5.x_lts?topic=overview-creating-tls-client-profile

    https://www.ibm.com/docs/en/api-connect/10.0.5.x_lts?topic=authentication-creating-tls-client-profile



    ------------------------------
    Nirmalan
    ------------------------------



  • 6.  RE: TLS Library Error

    Posted Thu August 22, 2024 08:21 AM
    Edited by Shah Wajahat Thu August 22, 2024 08:48 AM

    Hi Nirmalan

    I have create a client profile with allow insecure connection without keystore or trust store and configure this TLS client profile in invoke then i send the request i got this error status code 401  screenshot is attach

    kindly guide me if i am doing wrong steps

    Thankyou



    ------------------------------
    Shah Wajahat
    ------------------------------



  • 7.  RE: TLS Library Error

    Posted Thu August 22, 2024 11:13 AM

    Hi Shah,

    401 error means requests sent to the server and caused by unauthorized access.



    ------------------------------
    Nirmalan
    ------------------------------