0

Adam 5.8.0.14 does not supports TLS 1.2

Sandesh Suvarna 3 weeks ago in Workflow • updated 3 weeks ago 1

Adam workflow studio goes down completely when we disable TLS 1.1 and enable TLS 1.2 in app servers for Security reasons.



CS0015797 : Workflow studio is down in our adam PRD server



Following is the requirement:

As per Security guidelines, the weak transport layer security protocols eg. TLS1.0, TLS1.1 ; RC4 needs to be disabled on our External facing websites due to Security risk.

We see that our adam website have protocols TLSV1.1, TLSV1.0 and RC4 enabled due to some application requirement.

If we try to fix this setting on F5,the application starts giving us errors.

Hence our adam application must allow it use only TLSV1.2 which is giving this error:



Could not establish secure channel for SSL/TLS with authority 'prodigi.colpal.com'. Sandesh Suvarna
Message Could not establish secure channel for SSL/TLS with authority 'prodigi.colpal.com'.
Application Name WorkflowStudio
Site ID d4889b57-af11-4da9-aba1-c96d1b6a22ec
Session ID c0b4b758-d248-4027-88af-f6f1e0075b56
User Sandesh Suvarna
Additional Info
Exception: System.ServiceModel.Security.SecurityNegotiationException: Could not establish secure channel for SSL/TLS with authority 'prodigi.colpal.com'. ---> System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
--- End of inner exception stack trace ---

Server stack trace:
at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Security.SecuritySessionSecurityTokenProvider.DoOperation(SecuritySessionOperation operation, EndpointAddress target, Uri via, SecurityToken currentToken, TimeSpan timeout)
at System.ServiceModel.Security.SecuritySessionSecurityTokenProvider.GetTokenCore(TimeSpan timeout)
at System.IdentityModel.Selectors.SecurityTokenProvider.GetToken(TimeSpan timeout)
at System.ServiceModel.Security.SecuritySessionClientSettings`1.ClientSecuritySessionChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.CallOpenOnce.System.ServiceModel.Channels.ServiceChannel.ICallOnce.Call(ServiceChannel channel, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Adam.Workflow.Service.Contracts.Workflow.Service.IWorkflowService.GetWorkflowTasks(String providerName, PageRequest pageRequest, WorkflowTaskLoadOptions loadOptions)
at Adam.Workflow.Service.Client.WorkflowServiceClient.TryExecute[T](Func`1 execute)
at Adam.Workflow.Core.Client.WorkflowTaskCollection.OnLoad(String providerName, SearchExpression expression, String sortOrder, Int32 pageNumber, Int32 recordsPerPage, Boolean& isLastPage, Int32 maxRecords, Boolean includeTotalRowCount)
at Adam.Workflow.Core.Client.WorkflowTaskCollection.Load(SearchExpression expression, String sortOrder, Int32 pageNumber, Int32 recordsPerPage, Boolean& isLastPage, Int32 maxRecords, Boolean includeTotalRowCount, WorkflowTaskLoadOptions loadOptions)
at Adam.Workflow.Web.Studio.Plugins.TaskManagerPlugin.GetTodoTasks(PluginContext context)
at Adam.Workflow.Web.Studio.Plugins.TaskManagerPlugin.TryExecute(PluginContext context, Func`2 action)
Adam.Tools.IsSensitive: True
Adam.Tools.CreatedOn: 7/24/2018 10:49:51 AM
Adam.Tools.HandlingInstanceId: f1077ee6-a9f2-45a1-b6a7-18079814a92d
Adam.Tools.AppDomainName: /LM/W3SVC/1/ROOT/Workflow-3-131769029801237149
Adam.Tools.MachineName: ADAMWEB-PW19
Adam.Tools.WindowsIdentity: ADAMWEB-PW19\adamadmin
Adam.Web.Request.Url: /Workflow/Workflow.plugin?action=todo&count=25&sort=DueOn&view=&.t=1532429391577
Adam.Web.Request.Path: /Workflow/Workflow.plugin
Adam.Web.Request.UserHostAddress: 192.132.225.129
Adam.Web.User.IsAuthenticated: True
Adam.Web.User.AuthenticatedType:
Adam.Web.User.Name: Sandesh Suvarna
Adam.Web.Application.Path: E:\Adam\Studios\Workflow\
Adam.Web.Application.VirtualPath: /Workflow
Adam.Web.Application.TrustLevel: Full