Stored process connection: None of the requested encryption algorithms are supported by both peers

[DCL]

Hi,

While trying to call a stored process from JBOSS server, we are getting following error:

None of the requested encryption algorithms are supported by both peers: AES

SAS server has FIPS encryption level and we are not sure on how to make use of the same algorithm at the JBOSS end. Any insights on this matter would be highly appreciated.

We get following errors while trying different encryption algorithms:

encryption algorithm aesfailed... None of the requested encryption algorithms are supported by both peers: AES

encryption algorithm desfailed... None of the requested encryption algorithms are supported by both peers: DES

encryption algorithm rc2failed... None of the requested encryption algorithms are supported by both peers: RC2

encryption algorithm rc4failed... None of the requested encryption algorithms are supported by both peers: RC4

encryption algorithm sasproprietaryfailed... None of the requested encryption algorithms are supported by both peers: SASPROPRIETARY

encryption algorithm tripledesfailed... None of the requested encryption algorithms are supported by both peers: TRIPLEDES

encryption algorithm nullfailed... None of the requested encryption algorithms are supported by both peers: AES

If you need further details, please let me know.

Thanks in advance!

P.S- I also get issues while trying to call a Java webservice from SAS. Maybe it is linked to the same issue

ERROR: The SSL provider is not in FIPS 140-2 mode.

ERROR: Unable to load extension: (tkessl)

ERROR: An SSL cipher handle could not be created.

ERROR: TK extension TKEAM could not be loaded. Most likely secure communications are not available on this system.

ERROR: Unable to establish an SSL connection.

[ChrisHemedinger · Accepted solution]

What version of SAS?  9.2 or 9.3?  Sounds like you might be missing SAS/SECURE on one end of the connection -- or one of its components is not installed.

Some troublshooting tips (mostly involving logging) are here.  You might need to work with SAS Tech Support on this.

[DCL]

Hi Chris,

We are working on SAS9.4 version in server side, but the jar files in the client are old 9.3 version.

We are about to include the 9.4 jars there and retry the tests. Fingers crossed...

Thanks!

[DCL]

Hi Chris,

Connection worked when the 9.4 jars were used..

Regarding the failure I mentioned earlier while trying to call webservice from SAS was due to a missing server-client certificate.

Thanks once again!
Dilip