handshake_failure

Question

Hello!

We deployed integration between celoxis and Jira.

It worked fine, but started to get an error: "Received fatal alert: handshake_failure" while trying to send API calls to JIRA.

Nothig has changed in code.

What happened?

We use java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el7_6.x86_64/jre, version 1.7.0_211

Please, help!

Nic Brough -Adaptavist- · Answer

Not quite.  The errors are being reported by Jira.  That does not tell us the error is on the Jira side, it just says Jira has spotted the problem.

The normal working procedure in your API call here is:

* Celoxis makes a call to a Jira system
* Jira uses SSL, so it asks Celoxis for some encryption stuff
* Jira matches that up with its own encryption stuff and says "ok, this is how we will talk" back to Celoxis
* Celoxis can now talk to Jira

That's the "handshake" process.  It's actually a lot more complex than that, but we only need to understand that basic overview to talk about the problem you're having.

The error message "handshake failure" means that step 3 in the handshake process failed.  Jira was not able to match up Celoxis' encryption with what it is configured for.

This can happen when

* Jira's encryption data or settings have been changed
* Celoxis's encryption data or settings have been changed
* Celoxis's encryption data has become invaliid because of a date expiring or a certificate revocation

Now, we can rule out point 1 easily - does your Jira Cloud system work when you visit it in your browser?  I think you find it will.  Which means the SSL on the Jira side is working fine.

This means the error is on the Celoxis side.  If you've changed nothing yourself, then the most likely culprit is an expired certificate.

Strakhov Nikolai · Answer

Errors are on the JIRA side

Nic Brough -Adaptavist- · Answer

If you have not changed anything on the Celoxis side, then my best guess is that the SSL certificate that Celoxis is using has expired, and you'll need to install a new one.