How to install TLS1.2 in Java

Question

Environmental Information:

java version "1.7.0_40"
Java(TM) SE Runtime Environment (build 1.7.0_40-b43)
Java HotSpot(TM) 64-Bit Server VM (build 24.0-b56, mixed mode).

We use jboss-4.2.3.GA and a fat client using ejb.

And we tried to install TLS1.2 in the following ways:

• Control Panel → Programs → Java → Advanced Tab → Advanced Security Settings checked TLS1.1 and TLS1.2 and did not remove the remaining old versions. But still, in Shark software, we see that the client only talks to the server in TLSV1.

• -Ddeployment.security.SSLv2Hello=false -Ddeployment.security.SSLv3=false -Ddeployment.security.TLSv1=false -Ddeployment.security.TLSv1.1=true -Ddeployment.security.TLSv1.2=true

  Given that the script is running, but in the Shark Wire software, we see that the client only talks to the server in TLSV1.

  Link Link: https://superuser.com/questions/747377/enable-tls-1-1-and-1-2-for-clients-on-java-7

• jdk.tls.disabledAlgorithms= SSLv2Hello, SSLv3, TLSv1, TLSv1.1

  jre/lib/security/java.security jdk1.7.0_40/jre/lib/security/java.security. Shark , TLSV1.

  : Java- tls 1.2 tls 1.0 tls 1.1

- , TLS1.2 .

Answer 1

Tomcat 6 java 7, java 6 TLS1.2.

:

• server.xml sslEnabledProtocols :

<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
           maxThreads="450" scheme="https" secure="true"
           keystoreFile="<your_keystore>" keystorePass="<somepasswd>" clientAuth="false"
           keyAlias="tomcat" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"
           URIEncoding="UTF-8" maxHttpHeaderSize="32768" 
           ciphers = "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
                      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,
                      TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA" />

2. , .

Answer 2

Java .

Oracle, java 7 TLSv1, java 8 TLSv1.2

, JRE8, TLSv1.2. java-:

java version "1.8.0_92"
Java(TM) SE Runtime Environment (build 1.8.0_92-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.92-b14, mixed mode)

, TLS Java8, 1-, 2- ( -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2), .

java8: jdk.tls.disabledAlgorithms= SSLv2Hello, SSLv3, TLSv1, TLSv1.1. java7. , , . JRE, ? java 8 ?

Oracle , !