function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
Jason ThomasJason Thomas 

System.CalloutException: Received fatal alert: handshake_failure when authenticating with external webservice

I'm trying to authenticate with an external webservice in an apex class using a callout, and I'm getting this callout exception: "System.CalloutException: Received fatal alert: handshake_failure".  I can make the call using REST Console on my chrome browser.  Sending a POST HttpRequest to the following path:
https://{server}/auth?username={username}&password={password}

This should return json containing a sessionId, but when I execute this request i get the CalloutException.  I've registered the server in the remote sites in my SFDC instance.  I'm not sure why i'm getting this handshake failure.

Help!!!!!!
pconpcon
This looks like it might be an issue on Salesforce's end in regards to the SSLv3 (poodle) vunerability [1].  I would recommend that you reach out to Salesforce support and let them know and maybe they can give you an ETA on a fix.

[1] https://developer.salesforce.com/forums/?id=906F0000000AmTZIA0
James LoghryJames Loghry

I've commented on this in a few different places but yes, Salesforce is having an issue where if the outbound call uses SSLv3 (some do, some don't currently), then you'll receive a handshake_failure if the service has disabled SSL.  I and others have opened a ticket against Salesforce around this, and there is currently no ETA as pcon has mentioned.  I'd suggest following these threads for updates:

https://developer.salesforce.com/forums/ForumsMain?id=906F0000000AmcRIAS

http://salesforce.stackexchange.com/questions/53631/twilio-integration-and-sslv3-poodle-vulnerability

https://developer.salesforce.com/forums/?id=906F0000000AmTZIA0