Question TLS

[terry.michaelsen]

I have a program that has been working for several years that communicates to a Woo Commerce website API. The other day it stopped working. When opening the port I get an error 13. MSG(-1) says Unable to connect securely (err/ret=0/0). I talked to the Woo Commerce people and they told me they only support TLS1.2 and 1.3. The said the change happened a while ago, but I'm not sure I'm buying that. Any way I'm on an old version of PXPLus 12.5. And I'm running on AIX. It's also an Infor product so upgrading the PXPLus version is not a simple thing. After searching this board for a while it looks like by updating the OpenSSL on my server to 1.1.1 PXPLus would be able to do TLS 1.2. First question is, am I understanding that correctly? So I had my OS guy update the OpenSSL. Now I can connect to the Website using Curl. But I have the same issue in PXPlus. Also looking around it looks as though even after updating the openSSL, I have an old version of libssl.so. It seems as though AIX uses something called libssl.a which does have the newer date. I'm not sure which one PXPlus uses. Anyway I'm looking for some guidance on a way to get my old version of PXPlus use TLS 1.2 or 1.3 or any other reason I might be getting this error.

[Mike King]

While upgrading your PxPlus would likely be your best solution, you might want to consider simply using 'curl' (or 'wget') to send your requests, especially since you said curl can connect.

Obviously it would require some coding changes but invoking curl to submit the request wouldn't be all that difficult and would remove the need to update your PxPlus to a version that supports TLS1.2 or TLS1.3.

[terry.michaelsen]

Thank you Mike, I will do that. But just to make sure I understand, the version of PXPlus I'm on, 12.5, will not work with TLS1.2 or TLS1.3 regardless of what version of openSSL I'm on. Is that correct?
 

[Mike King]

I'm sorry, but off the top of my head I cannot remember which OpenSSL was supported by version 12.5.

Generally, on Linux, PxPlus uses the OS installed version of OpenSSL however there are changes within the OpenSSL interface that limit which version can be used without code changes within the PxPlus kernel.