TLS Handshake Fail Error

Fix TLS handshake failures in Pynt. Learn how to troubleshoot and resolve issues preventing successful TLS connections during API security scans.

The related errors in Pynt indicates that a secure connection to your API target could not be established. This guide will help you troubleshoot and resolve issues causing TLS handshake failures, ensuring secure and successful communication during your API security scans.

Error messages:

• TLS handshake failed because of an unauthorized certificate.

• TLS handshake failed because your target uses a self-signed certificate.

What happened:

The SSL certificate used to identify the site is not trusted. This can be due to a self-signed certificate, a certificate that was signed using an untrusted CA, or due to an SSL stripping mechanism.

How to resolve:

Use the “--insecure” flag when running Pynt’s Docker.

** Please note that running in insecure mode means we can’t verify the identity of the server and use this option with caution.