How to enable TLS version 1.2 in web logic for outgoing https transactions

java ssl weblogic12c jsse ibm-jdk
smallarv picture smallarv · Oct 27, 2016 · Viewed 19.6k times · Source

I am working on one project which require TLS version 1.2 to be enabled on web logic server for outgoing https transactions. I tried using below properties in web logic startup script : Weblogic.security.SSL.minimumProtocolVersion=TLSv1.2 Or Weblogic.security.SSL.protocolVersion=TLS

But when I ran some test I was able to see TLSv1 still getting used in the clientHello message in weblogic SSL logs. We tried every permutation and combination to start the TLS handshake with TLSv1.2 but no success so far.

When we enabled sun based http handler in weblogic and used below property in startup script, I was able to use TLSv1.2 -DUseSunHttpHandler=true -Dhttps.protocols=TLSv1.2

My question is how to enable TLSv1.2 in weblogic 12c version with IBM java 1.7 SR9 for outgoing https transactions when using weblogic http connection classes instead of sun based http classes?

Answer

Suresh Ram picture Suresh Ram · Apr 3, 2018

You can enable TLSv1.2 for Outgoing connection from Weblogic.

Under the managed servfer, Server Startup in the arguments add as below

-Djdk.tls.client.protocols=TLSv1.2

Related questions

WebLogic javax.net.ssl.SSLHandshakeException

My application needs to connect to webservice to some stuff. This was working fine when my application was deployed over tomcate, however when I deployed my application over weblogic I got: com.sun.xml.ws.client.ClientTransportException: HTTP transport error: …

Read More
Resolving javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed Error?

Edit :- Tried to format the question and accepted answer in more presentable way at mine Blog Here is the original issue. I am getting this error: detailed message sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.…

Read More
Unable to find valid certification path to requested target - error even after cert imported

I have a Java client trying to access a server with a self-signed certificate. When I try to Post to the server, I get the following error: unable to find valid certification path to requested target Having done some research …

Read More