Problem

Version 8 of Red Hat introduces some major overhauls to its security and cryptographic components (documented here). Most notably, TLSv1 is disabled by default which causes a problem for some not-so-recent versions of DataStage which require TLSv1. Users of these versions may encounter either of the following TLS Errors:

javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client.

or

javax.net.ssl.SSLHandshakeException: The server selected protocol version TLS10 is not accepted by client preferences [TLS12]

Solution

Run the following command:

update-crypto-policies --set LEGACY

Now restart the server that hosts MettleCI Workbench and verify that the issue no longer occurs.

MettleCI Documentation

Workbench / DataStage TLS not working on Red Hat Enterprise Linux 8 (RHEL-8) or later

Problem

Solution

See Also