Re: TLS 1.1 and 1.2 and java 7

On i 7.1:
In order for TLS1.1 TLS1.2 to be "available" to IBMi5OSJSSEProvider there
are two configuration steps required now.
1) QSSLPCL must have TLS1.1 TLS1.2 in it.
2) TLS1.1 TLS1.2 must be added to the System SSL Eligible Default Protocol
list using the SSLCONFIG advanced analysis macro as shown below
-eligibleDefaultProtocols

On i 7.2:

Both QSSLPCL and eligibleDefaultProtocols have TLSv1.2 and TLSv1.1 by
default. No system level action by the user should be needed.

SSL_TLSv2 is the default for IBMi5OSJSSEProvider JDK7.



Best regards.
____________________________________________________________________________________________
Gavin, Zhang Gan --
https://w3-connections.ibm.com/profiles/html/profileView.do?key=d77158d7-c5cd-4e6e-a90d-23dddc9cbaba&lang=en
IBM i J9 Team Lead,
Email: zhanggan@xxxxxxxxxx
Phone: +86-10-82452719
Address: 1/F, 28, ZhongGuanCun Software Park, No.8 Dong Bei Wang West
Road, Haidian District, Beijing P.R.China 100193
J9 on i: http://www.ibm.com/developerworks/ibmi/techupdates/java



----- Original message -----
From: Mike Cunningham <mike.cunningham@xxxxxxx>
Sent by: "JAVA400-L" <java400-l-bounces@xxxxxxxxxxxx>
To: Java Programming on and around the IBM i <java400-l@xxxxxxxxxxxx>
Cc:
Subject: TLS 1.1 and 1.2 and java 7
Date: Sat, Jan 23, 2016 1:39 AM

I am reading some posts that say Java 1.7 supports TLS 1.1 and 1.2 but
that it is not turned on by default. Does anyone know if this applies to
java 7 on IBM iSeries and websphere?

Mike Cunningham
VP of Information Technology Services/CIO
Pennsylvania College of Technology

--
This is the Java Programming on and around the IBM i (JAVA400-L) mailing
list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [1]http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [2]http://archive.midrange.com/java400-l.


References

Visible links
1. http://lists.midrange.com/mailman/listinfo/java400-l
2. http://archive.midrange.com/java400-l