For a deeper look into our Elektron API, look into:

Overview |  Quickstart |  Documentation |  Downloads |  Tutorials |  Articles

question

Upvotes
Accepted
robin.aspinall.extern avatar image
1 ●1 ●1 ●1

SSL connectivity issue

Hi

Could anyone assist and provide more details on what the error location might potentially means? or is the error location as such not relevant for this message?


Text: Failed to add RsslChannel(s) to RsslReactor. Channel name(s) Channel_5

Instance Name Consumer_5_671

RsslReactor 0x0000000002A08F70

RsslChannel 0

Error Id -1

Internal sysError 0

Error Location C:\Jenkins\workspace\ESDKCore_RCDEV\OS\VS140-64\rcdev\source\rtsdk\Cpp-C\Eta\Impl\Reactor\rsslReactor.c:6896

Error Text Failed to request authentication token information. Text: <C:\Jenkins\workspace\ESDKCore_RCDEV\OS\VS140-64\rcdev\source\rtsdk\Cpp-C\Eta\Impl\Reactor\Util\rsslRestClientImpl.c:1595> Error: Failed to perform the request with text: SSL connect error

#technologyema-apieta-apissl
icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

wasin.w avatar image   wasin.w
<AHS>

Contacting the EDS Gateway team.

raksina.samasiri avatar image   raksina.samasiri
Hi @robin.aspinall.extern ,

Thank you for your participation in the forum. Is the reply below satisfactory in resolving your query?

If so please can you click the 'Accept' text next to the appropriate reply? This will guide all community members who have a similar question.

Thanks,
AHS

raksina.samasiri avatar image   raksina.samasiri

Please be informed that a reply has been verified as correct in answering the question, and has been marked as such.

Thanks,
AHS

4 Answers

· Write an Answer
Upvotes
Accepted
wasin.w avatar image
24.7k ●54 ●17 ●14

Hello @robin.aspinall.extern

Please refer to my colleague's answer in this post. The error indicates that the API was trying to send an HTTP request message to the RDP API gateway. I highly recommend you test the issue by running a curl command in that post on the machine that encounters the issue.

If the machine does not have OpenSSL, zlib, and cURL, you can check the following resources:

icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
robin.aspinall.extern avatar image
1 ●1 ●1 ●1

Thank you for the response. If we run the curl we run into issue of "revocation server was offline"


* Trying 75.2.0.254:443...

* Connected to api.refinitiv.com (75.2.0.254) port 443 (#0)

* schannel: disabled automatic use of client certificate

* ALPN: offers http/1.1

* schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline.

* Closing connection 0

* schannel: shutting down SSL/TLS connection with api.refinitiv.com port 443

curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline.


icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
wasin.w avatar image
24.7k ●54 ●17 ●14

Hello @robin.aspinall.extern

I checked with the API Gateway team. The issue seems to relate to your network, so I highly recommend contacting your IT team to verify your network policy/certifications.

Note: If your IT team needs the static IP Address of the api.refinitiv.com endpoint, they are the following addresses:

  • 75.2.0.254
  • 99.83.242.11
icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
robin.aspinall.extern avatar image
1 ●1 ●1 ●1

Thank you for the answer. We have the relevant IP Addresses. The issue seems with the firewall doesn't supporting to ping a url to resolve the IP. Hence we have to whitelist IP ranges.

Is there a possibility via config or code to exclude CRL revocation check on the certificate?

icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

wasin.w avatar image wasin.w

Hello @robin.aspinall.extern

Unfortunately, the RTSDK does not have a feature to exclude CRL revocation checks on the certificate via config or code.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.