Unable to connect Jenkins server from RTC with TLS 1.2 enabled
Our networking team has configured our F5 load balancer to use TLS 1.2 in our test environments. Since doing this our connection between RTC and Jenkins is broken. We've enabled TLS 1.2 in our WAS 8.5.5 profile but still couldnt connect to the Jenkins server. Im guessing there's additional configuration needed.
We’ve tried adding,
-Dcom.ibm.jsse2.overrideDefaultProtocol=SSL_TLSv2
To the Jazz properties in WAS with no luck.
We’ve also added the JVM arguments,
-Dcom.ibm.team.repository.transport.client.protocol=TLSv1.2
-Dhttps.cipherSuites=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
and got some different results but still couldn’t hit the Jenkins server,
Connection test requested.
Connecting to: https://jenkins.testqa.zionsbank.com
Exception: java.lang.IllegalArgumentException: Cannot support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
Test connection FAILED!
Before this change we were getting,
Connection test requested.
Connecting to:
Exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
Test connection FAILED!
we've also changed TLSv1.2 to SSL_TLSv2 in the Quality of Protection settings
We also download JCE updates for Java 6 but it totally broke connectivity to the RTC application. Any help would be appreciated.
One answer
Based on the error message alone, you can follow the technote below to enable strong encryption, and hopefully resolve the issue.
http://www-01.ibm.com/support/docview.wss?uid=swg21245273