If you use a properties file to configure your application then set these two properties properties based on your version of java being used (examples below). If you don't use a properties file then you will need to figure out a good place in your code to set these two properties or set them from the command line. The document your referenced has what you needed other than it skipped over the least used property but the one probably most relevant to your situation.
Java 7+
https.protocols=" TLSv1.2,TLSv1.1,TLSv1 "
jdk.tls.client.protocols=" TLSv1.2,TLSv1.1,TLSv1 "
Java 6
https.protocols="TLSv1.1,TLSv1 "
jdk.tls.client.protocols="TLSv1.1,TLSv1 "
You can reverse the order to have it try from least good to best :-)
Coy Krill
Core Processing Administrator/Analyst
Washington Trust Bank
-----Original Message-----
From: JAVA400-L <java400-l-bounces@xxxxxxxxxxxx> On Behalf Of James H. H. Lampert
Sent: 2018 April 17 10:49
To: Java 400 List <java400-l@xxxxxxxxxxxx>
Subject: TLS 1.1 and later in Java-based emulator
Importance: Low
We've just received word from a customer that our terminal emulator fails if they disable TLS 1.0 support on their box.
That tells me that our emulator isn't supporting TLS 1.1 or later.
What needs to happen in order to change that? Do we need to recompile under a later Java release? (It may still be compiled under Java 6) Set some parameter? Unfortunately, I was quite literally not involved in the SSL support on the emulator (my responsibilities lay with getting the finer points of 5250 data stream working right).
This online doc:
http://www.ateam-oracle.com/tls-and-java/
tells me that Java 6 started supporting TLS 1.1 at update 111, and Java
7 supports through TLS 1.2. But it seems to talk primarily about HTTPS.
(Let's face it, TN5250 is rather obscure outside of IBM Midrange circles, and Secured TN5250 doubly so!)
--
JHHL
--
This is the Java Programming on and around the IBM i (JAVA400-L) mailing list To post a message email: JAVA400-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
https://archive.midrange.com/java400-l.
---------------------------------------------------------------------
This electronic mail message and any attachments may contain confidential or privileged information and is intended for use solely by the above-referenced recipient. Any review, copying, printing, disclosure, distribution, or other use by any other person or entity is strictly prohibited under applicable law. If you are not the named recipient, or believe you have received this message in error, please immediately notify the sender by replying to this message and delete the copy you received
---------------------------------------------------------------------
midrange.com
