Punchout in Oracle iProcurement and Exchange Fails After Supplier Site Migrates From SSLv3 to TLS Protocol (with SSL Handshake SSLIOClosedOverrideGoodbyeKiss) (Doc ID 1937220.1)

Last updated on SEPTEMBER 15, 2016

Applies to:

Oracle Exchange Marketplace - Version 6.2.4 to 6.2.5 [Release 6]
Oracle iProcurement - Version 11.5.10.2 to 12.2.4 [Release 11.5 to 12.2]
Information in this document applies to any platform.

Symptoms

In Oracle iProcurement, Release 11.5.10 and higher, an error occurs when performing a direct punchout to the supplier site.

The error exception details show the following information:

Error Code: 201 Unable To Reach Supplier Site
Unable to send the Login Request XML.
Supplier Login URL: https://www.supplier.com/punchout/main.aspx
Request String: <?xml version = '1.0' encoding = 'UTF-8'?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.1.007/cXML.dtd">
<cXML version="1.1.007" xml:lang="en-US" payloadID="20141015042111.1182018977.36383@ebsp.sficorp.com" timestamp="2014-10-15T04:21:11-06:00">
<Header>
...
...
ProcessorException

Proxy Host: null
Proxy Port: -1
CA Certification File Location: /ebsapp/apps/tech_st/10.1.2/sysman/config/b64InternetCertificate.txt

URL: https://www.supplier.com/punchout/main.aspx
java.io.IOException: java.io.IOException: javax.net.ssl.SSLException: SSL handshake failed: SSLIOClosedOverrideGoodbyeKiss
at oracle.security.ssl.OracleSSLSocketImpl.startHandshake(Unknown Source)
at oracle.apps.icx.punchout.util.HttpsURL.createConnection(HttpsURL.java:492)
at oracle.apps.icx.punchout.util.HttpsURLConnection.connect(HttpsURLConnection.java:243)
at oracle.apps.icx.punchout.util.HttpsURLConnection.getOutputStream(HttpsURLConnection.java:227)
at oracle.apps.icx.punchout.processors.HttpPostProcessor.postRequest(HttpPostProcessor.java:167)
at oracle.apps.icx.punchout.processors.HttpPostProcessor.execute(HttpPostProcessor.java:111)
at oracle.apps.icx.punchout.server.PunchoutAMImpl.postLoginRequestXML(PunchoutAMImpl.java:1044)
at oracle.apps.icx.punchout.server.PunchoutAMImpl.performLogin(PunchoutAMImpl.java:176)
at sun.reflect.GeneratedMethodAccessor844.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at oracle.apps.fnd.framework.server.OAUtility.invokeMethod(OAUtility.java:190)
at oracle.apps.fnd.framework.server.OAApplicationModuleImpl.invokeMethod(OAApplicationModuleImpl.java:720)
at oracle.apps.icx.por.common.webui.ClientUtil.invokeMethod(ClientUtil.java:997)
at oracle.apps.icx.por.common.webui.PorBaseCOImpl.invokeMethod(PorBaseCOImpl.java:242)
at oracle.apps.icx.punchout.webui.PunchoutLoginCO.performLogin(PunchoutLoginCO.java:322)
at oracle.apps.icx.punchout.webui.PunchoutLoginCO.processRequest(PunchoutLoginCO.java:113)
at oracle.apps.fnd.framework.webui.OAWebBeanHelper.processRequest(OAWebBeanHelper.java:604)
...
...

  

 


Steps To Reproduce

1.  Login to Oracle Applications
2.  Navigate to an iProcurement responsibility.
3.  Perform a punchout to supplier site, such as CDW, which has migrated from SSLv3 to TLS protocol. 
- The error occurs at this point.
- Due to this issue, iProcurement users are unable to request goods and services from the punchout sites.


Similar errors are reported when performing a punchout to supplier through the Oracle Exchange.



Changes

Supplier sites have migrated from SSLv3 protocol to TLS (Transport Layer Security) protocol.


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms