RTC eclipse client not connecting after enabling TLS v1.2 in WAS
Hi
Since we have a dependency to update the WAS to support TLS v1.2 for compliance, we did the changes as in https://jazz.net/help-dev/clm/index.jsp? re=1&topic=/com.ibm.jazz.install.doc/topics/t_enable_tls1.2_was. html&scope=null
But after this the RTC eclipse client is not connecting to this profile, and gives error as : Remote host closed connection during handshake SSL peer shut down incorrectly
Web client access works fine.
Since we have a dependency to update the WAS to support TLS v1.2 for compliance, we did the changes as in https://jazz.net/help-dev/clm/index.jsp? re=1&topic=/com.ibm.jazz.install.doc/topics/t_enable_tls1.2_was. html&scope=null
But after this the RTC eclipse client is not connecting to this profile, and gives error as : Remote host closed connection during handshake SSL peer shut down incorrectly
Web client access works fine.
2 answers
Hi Vidya
You need to configure Rational Team Concert client to support the TLS 1.2 protocol.
Steps:
1. Go to the directory where the Rational Team Concert client is installed. The default location on Windows is Program Files\IBM\TeamConcert and on the UNIX systems is opt/IBM/TeamConcert.
2. Open the eclipse.ini file for editing and add the following protocol:
-Dcom.ibm.team.repository.transport.client.protocol=TLSv1.2
3. Save and close the eclipse.ini file.
Reference article:
http://www-01.ibm.com/support/knowledgecenter/SSYMRC_6.0.1/com.ibm.jazz.install.doc/topics/t_enable_tls1.2_rtc.html?lang=en
If this answers your question please mark it as accepted.
Regards,
Rohit
You need to configure Rational Team Concert client to support the TLS 1.2 protocol.
Steps:
1. Go to the directory where the Rational Team Concert client is installed. The default location on Windows is Program Files\IBM\TeamConcert and on the UNIX systems is opt/IBM/TeamConcert.
2. Open the eclipse.ini file for editing and add the following protocol:
-Dcom.ibm.team.repository.transport.client.protocol=TLSv1.2
3. Save and close the eclipse.ini file.
Reference article:
http://www-01.ibm.com/support/knowledgecenter/SSYMRC_6.0.1/com.ibm.jazz.install.doc/topics/t_enable_tls1.2_rtc.html?lang=en
If this answers your question please mark it as accepted.
Regards,
Rohit
Hi Rohit
Thanks for your answer. Yes we did the same. but found new version of client have got to be used after this TLS v1.2 is enabled. Not sure if this is the requirement. ie I was using 4.0.2 and connecting 4.0.7, got this error.
So installed 4.0.7 and then tried connecting, and now it works.
Is there any pre-requisite like this?
Thanks for your answer. Yes we did the same. but found new version of client have got to be used after this TLS v1.2 is enabled. Not sure if this is the requirement. ie I was using 4.0.2 and connecting 4.0.7, got this error.
So installed 4.0.7 and then tried connecting, and now it works.
Is there any pre-requisite like this?
Comments
Hi Vidya
In my scenario, the server was CLM6.0.1.
I did tried connecting the RTC eclipse client 5.0( N-1 level) and 6.0.1(same level) after adding the property to enable TLS1.2 and it works fine.
Limited TLS1.2 support and support for the National Institute of Standards and Technology (NIST) standard SP 800-131A has been added from CLM4.0.4. Please see the New and Noteworthy features:
https://jazz.net/downloads/rational-team-concert/releases/4.0.4?p=news#security-404
In your scenario, your server is CLM4.0.7 and RTC eclipse client is 4.0.2. Hence, CLM4.0.2 will not support TLS1.2 as this feature begins from version 4.0.4.
If this answers your question please mark it as accepted.
Regards,
Rohit