Troubleshooting SSL Handshake Error
An SSL Handshake error typically occurs when a secure connection cannot be established due to issues like incompatible SSL protocol versions, ciphers or missing client certificates.
Verify URL Accessibility
Ensure that the URL you’re monitoring is accessible from the server where Applications Manager is installed.
- Test in a browser: Open the URL in a Private / Incognito window and confirm it’s accessible over HTTPS.
- Use cURL or Wget: You can also use tools like cURL or Wget to test the URL's availability from the server.
Adjust SSL Protocol Version
If the issue persists, the SSL protocol version might be incompatible. To fix this:
- Go to the Add / Edit Monitor page of the monitor.
- Set the SSL version to Auto.
- Poll the monitor a few times to allow Applications Manager to automatically select the most appropriate protocol and resolve any version mismatch.
Enable more ciphers
If you’re facing issues with incompatible ciphers, enabling weaker ciphers and algorithms may help:
- Navigate to Settings > Product Settings -> Global Settings.
- Check the option "Enable weaker ciphers and algorithms".
- Click Save to apply the changes.
- Restart Applications Manager and Poll the monitor 1-2 times to check if the issue is resolved.
Check client certificate
If the URL uses client-side authentication (AKA 2 way authentication) then, ensure that the client certificate applied has not expired and the password added in the monitor is correct.
- You can check if the client certificate is present by navigating to <ApplicationsManagerHome> -> working -> Cert -> URL
- Here, check for the presence of the client certificate file. If the file is not present then, try updating the monitor with the client certificate file.
Check proxy settings
- Proxy Server Configuration: If your environment requires the use of a proxy server to access the URL, configure the proxy in Applications Manager. Click here to learn how to configure the proxy.
- Bypass Proxy for the URL : If you have configured a proxy in Applications Manager but want to bypass it for the server Host/IP, add the Host/IP under the "Do not use proxy for addresses beginning with" section in the "Configure Proxy" page: Navigate to Settings > Product Settings > Proxy Server Settings.
Still facing issues?
If the problem persists, contact our support team along with the following details:
- A screenshot of the "Add Monitor" page.
- The URL debug tool response for the URL monitor.
- Reproduce the issue and share the latest Support Information File (SIF) from Applications Manager, with the "Print all logs" option enabled. To do this, go to Settings > Logging, and choose "Print all logs".
New to ADSelfService Plus?
Related Articles
Troubleshooting URL Monitor
When configuring a URL monitor in Applications Manager, you might encounter several errors related to accessibility, configuration, or server-side issues. Below are common errors along with step-by-step troubleshooting instructions to help you ...LDAP - Unable to find valid SSL Certificate
If there is an error while adding LDAP Server Monitor with the message "Unable to find valid SSL Certificate", then please try the below steps to troubleshoot the issue. When the error occurs we can find the below traces in the "stderr.txt.*" log ...Real User Monitor (RUM) - Troubleshooting
If the monitor has not polled data for a long time, follow the below steps for troubleshooting. Step 1: Check the RUM Agent configuration Real User Monitor requires the RUM Agent to be installed and mapped to the Applications Manager. Refer this help ...Resolving Issues When Onboarding SSL-Enabled MySQL Database Servers
Error Message: Connections using insecure transport are prohibited while --require_secure_transport=ON Solution: To overcome this issue follow the steps given below: Execute the following query in the corresponding MySQL shell script: ALTER USER ...Troubleshooting Nutanix Monitor Handshake error in Applications Manager
If you encounter a handshake error while trying to access a Nutanix monitor, follow these steps to troubleshoot and resolve the issue: Ensure that all validations are performed from the machine where Applications Manager is installed. Verify Port and ...