How to resolve API received fatal alert: handshake_failure

It may be the case a customer is using the Java wrapper to utilize the Veracode APIs and encounters a fatal handshake error similar to the following:

FATAL: Exception "Name of API method" API call
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

This error is related to the Veracode blockage of TLS 1.0 for API connectivity which occurred on May 30th at 11am EDT.  

Recommend to the customer to verify which version of Java is installed on the machine where the API command is being invoked.  If Java 7 is installed then recommend to upgrade to Java 8 for resolution.  

If Java 7 needs to remain then apply the Java Cryptographic Extension (JCE) Unlimited Strength Jurisdiction Policy to the JRE. The JCE Unlimited Strength Jurisdiction Policy files can be downloaded from Oracle.  If using Java 7, then need to upgrade the integrations being used such as the Java Wrapper, Eclipse Plugin, Intelli Plugin, Jenkins plugin, JIRA plugin.

You can refer to the Help Center - What's New section Release 2017.5:

https://analysiscenter.veracode.com/auth/helpCenter/releasenotes.html

Topics (0)

Related Articles

Related Topics

    Ask the Community

    Get answers, share a use case, discuss your favorite features, or get input from the Community.