Tech Tips: How to disable TLSv1 on all DevTest Servers and your Workstation

Document created by MarcyNunns Employee on Oct 27, 2017
Version 1Show Document
  • View in full screen mode

Introduction
How to disable TLSv1 on all DevTest Servers and your Workstation.

 

Background
Needing to disable TLSv1 due to a vulnerability with DevTest.

 

Environment
All supported releases and platforms.

 

Instructions
To disable TLSv1 on all servers then do this on each DevTest server and your Workstation:


1. Edit the DevTest Home/jre/lib/security/java.security file
2. In there is a line similar to (about line 537)
Change from:
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768
Change to:
jdk.tls.disabledAlgorithms=SSLv3, TLSv1, RC4, MD5withRSA, DH keySize < 768
this to disable TLSv1.0
or to
jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, MD5withRSA, DH keySize < 768
this to disable TLSv1.0 and TLSv1.1

You will have to restart all of the DevTest components.

 

KB TEC1289636

Attachments

    Outcomes