websphere + SSLv3 SSLContext not available

java sql-server hibernate websphere sslv3
Coola picture Coola · Feb 18, 2015 · Viewed 8.1k times · Source

I have a java application that is using hibernate to do a JNDI lookup for the datasource in Websphere Application Server which then talks to a MSSQL database.

The security team has recently patched the Websphere server 8.5.5.4 to disable SSLv3.

As such I'm getting a com.ibm.websphere.ce.cm.StaleConnectionException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encyption. Error: "SSLv3 SSLContext not available".

Before this, I could access the data without any issues.

What can I do to overcome this issue? Do I need to configure the application to use TLS?

I'm using Hibernate 4.3.7.

The hibernate config looks like this. 

<hibernate-configuration>
    <session-factory>
    <property name="hibernate.connection.driver_class">net.sourceforge.jtds.jdbc.Driver</property>
    <property name="connection.datasource">jdbc/testing</property>
    <property name="hibernate.dialect">org.hibernate.dialect.SQLServerDialect</property>
    <mapping resource="myApplication.hbm.xml" />
    </session-factory>
</hibernate-configuration>

Any help would be greatly appreciated.

Answer

trikelef picture trikelef · Feb 18, 2015

Maybe you should look at the MSSQL side to check whether TLS (at least 1.0 version) is supported. If not try to enable it.

Otherwise a (not recommended from security view) fix is to enable SSLv3 temporarily by using the following JVM argument until you find a way to communicate through TLS:

-Dcom.ibm.jsse2.disableSSLv3=false

Related questions

JPA - How to set string column to varchar(max) in DDL

With JPA, DDL-generation for the attribute: @Column final String someString; will be someString varchar(255) null @Column(length = 1337) final String someString; will yield someString varchar(1337) null. But how can I get it to produce someString varchar(max) null? Is it possible …

Read More
How to map an entity field whose name is a reserved word in JPA

@Column(name="open") Using sqlserver dialect with hibernate. [SchemaUpdate] Unsuccessful: create table auth_session (id numeric(19,0) identity not null, active tinyint null, creation_date datetime not null, last_modified datetime not null, maxidle int null, maxlive int null, open tinyint …

Read More
Java Hibernate with SQL Server 2012 not working?

I have a Java Hibernate project configuration which worked with SQL Server 2008 R2, now with a new OS 8.1 (from 7) and SQL Server 2012 (express), I'm unable to connect to SQL server. Relevant configuration which is/should be syntactically correct since it …

Read More