Punchout in Oracle iProcurement and Exchange Fails After Supplier Site Migrates From SSLv3 to TLS Protocol (with SSL Handshake SSLIOClosedOverrideGoodbyeKiss)
(Doc ID 1937220.1)
Last updated on JANUARY 09, 2023
Applies to:
Oracle Exchange Marketplace - Version 6.2.4 to 6.2.5 [Release 6]Oracle iProcurement - Version 11.5.10.2 to 12.2.7 [Release 11.5 to 12.2]
Information in this document applies to any platform.
Symptoms
In Oracle iProcurement, Release 11.5.10 and higher, an error occurs when performing a direct punchout to the supplier site.
The error exception details show the following information:
Unable to send the Login Request XML.
Supplier Login URL: https://www.supplier.com/punchout/main.aspx
Request String: <?xml version = '1.0' encoding = 'UTF-8'?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.1.007/cXML.dtd">
<cXML version="1.1.007" xml:lang="en-US" payloadID="20141011111111.11822222977.36333@<DOMAIN_NAME>" timestamp="2014-10-15T04:21:11-06:00">
<Header>
...
...
ProcessorException
Proxy Host: null
Proxy Port: -1
CA Certification File Location: /ebsapp/apps/tech_st/10.1.2/sysman/config/b64InternetCertificate.txt
URL: https://www.supplier.com/punchout/main.aspx
java.io.IOException: java.io.IOException: javax.net.ssl.SSLException: SSL handshake failed: SSLIOClosedOverrideGoodbyeKiss
at oracle.security.ssl.OracleSSLSocketImpl.startHandshake(Unknown Source)
at oracle.apps.icx.punchout.util.HttpsURL.createConnection(HttpsURL.java:492)
at oracle.apps.icx.punchout.util.HttpsURLConnection.connect(HttpsURLConnection.java:243)
at oracle.apps.icx.punchout.util.HttpsURLConnection.getOutputStream(HttpsURLConnection.java:227)
at oracle.apps.icx.punchout.processors.HttpPostProcessor.postRequest(HttpPostProcessor.java:167)
at oracle.apps.icx.punchout.processors.HttpPostProcessor.execute(HttpPostProcessor.java:111)
at oracle.apps.icx.punchout.server.PunchoutAMImpl.postLoginRequestXML(PunchoutAMImpl.java:1044)
at oracle.apps.icx.punchout.server.PunchoutAMImpl.performLogin(PunchoutAMImpl.java:176)
at sun.reflect.GeneratedMethodAccessor844.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at oracle.apps.fnd.framework.server.OAUtility.invokeMethod(OAUtility.java:190)
at oracle.apps.fnd.framework.server.OAApplicationModuleImpl.invokeMethod(OAApplicationModuleImpl.java:720)
at oracle.apps.icx.por.common.webui.ClientUtil.invokeMethod(ClientUtil.java:997)
at oracle.apps.icx.por.common.webui.PorBaseCOImpl.invokeMethod(PorBaseCOImpl.java:242)
at oracle.apps.icx.punchout.webui.PunchoutLoginCO.performLogin(PunchoutLoginCO.java:322)
at oracle.apps.icx.punchout.webui.PunchoutLoginCO.processRequest(PunchoutLoginCO.java:113)
at oracle.apps.fnd.framework.webui.OAWebBeanHelper.processRequest(OAWebBeanHelper.java:604)
...
...
Steps To Reproduce
1. Login to Oracle Applications
2. Navigate to an iProcurement responsibility.
3. Perform a punchout to supplier site, such as CDW, which has migrated from SSLv3 to TLS protocol.
- The error occurs at this point.
- Due to this issue, iProcurement users are unable to request goods and services from the punchout sites.
Similar errors are reported when performing a punchout to supplier through the Oracle Exchange.
Changes
Supplier sites have migrated from SSLv3 protocol to TLS (Transport Layer Security) protocol.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |