Enabling SSL/TLS on WorkflowGen server

Development Integration
1

If you want to contact a web service that uses the new TLS protocol through the web services application connector or the RESTAPICLIENT application, you need to enable SSL/TLS on the WorkflowGen server using the following PowerShell commands:

Set-ItemProperty -Path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NetFramework\v4.0.30319' -Name 'SchUseStrongCrypto' -Value '1' -Type DWord

Set-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\.NetFramework\v4.0.30319' -Name 'SchUseStrongCrypto' -Value '1' -Type DWord

Restart your IIS server after executing the commands.

2

Hello - we made this change to use the new TLS protocol but it now appears remote approval no longer works. The emails appear to be processed but the approval is not occurring. Below is the log info (login omitted). Recommendations? We are on v 7.2.0

Resolving server …
Server: outlook.office365.com
Port: 993
AuthType: AuthLogin
User:
Password:
Alias:
SSLConnection: True
SSLType: ConnectSSLAuto
Protocol: Imap4
SocksProxyServer:
SocksProxyPort: 1080
SocksProxyUser:
SocksProxyPassword:
ProxyProtocol: Socks5

Create socket InterNetwork,Stream,Tcp …
Start to connecting …
40.97.228.178, 993
Connected

  • OK The Microsoft Exchange IMAP4 service is ready. [QgBOADcAUABSADAANgBDAEEAMAAwADYANwAuAG4AYQBtAHAAcgBkADAANgAuAHAAcgBvAGQALgBvAHUAdABsAG8AbwBrAC4AYwBvAG0A]
    A0002 LOGIN
    A0002 OK LOGIN completed.
    A0003 LIST “” “”
  • LIST (\Noselect \HasChildren) “/” “”
    A0003 OK LIST completed.
    A0004 SELECT “INBOX”
  • 0 EXISTS
  • 0 RECENT
  • FLAGS (\Seen \Answered \Flagged \Deleted \Draft $MDNSent)
  • OK [PERMANENTFLAGS (\Seen \Answered \Flagged \Deleted \Draft $MDNSent)] Permanent flags
  • OK [UIDVALIDITY 14] UIDVALIDITY value
  • OK [UIDNEXT 7759] The next unique identifier value
    A0004 OK [READ-WRITE] SELECT completed.
    A0005 EXPUNGE
  • 0 EXISTS
    A0005 OK EXPUNGE completed.

2020-05-27T00:00:29Z; Deleted emails removed from server;

3

@hcampeau,

Looking at the logs, it seems that the connection to the inbox was successful but there are 0 emails in the inbox, that’s why you see nothing happening in remote approval.
Make sure you are replying to the correct email address and that your SMTP server does not redirect the emails to another email.
If you think everything is well setup, I recommend opening a support ticket and the team will take a look at it.

Regards,
Eddy.

4

Hi Eddy,

I’ve reached out to support and it turns out remote approval isn’t compatible with the new TLS requirement and a patch is required.

The emails do land in the inbox and are then deleted without being processed.

Just wanted to make you aware.

image001.png

5

Good to know thanks!