Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

How to change TLS version to 1.2 in RTC 5.0.2

Questions
Tags
Users
Badges
Delhiganesh Sabapathy
(11●1●2) edited
Nov 12 '23, 8:05 p.m.

We are using RTC 5.0.2 with WebSphere 8.5.5.3 in Red Hat Enterprise Linux Server release 6.9 (Santiago). 


Is TLS1.2 supported in this configuration? if yes, what is the procedure to update TLS1.2 in  RTC 5.0.2. ,

We use CCM/JTS in it.

Thanks,
Delhi

0 votes

1 answer
5,035 views
0 votes

One answer

Permanent link
Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER (64.6k●3●36●49) Nov 13 '23, 3:29 a.m.

 RTC 5.0.2 is out of support for a long time now. The only supported versions to date are 7.0.2 and later.

As far as I know 5.x and 6.x do not support TLS 1.2 and the only way to get to TLS 1.2 support is upgrading to a supported version. That upgrade also contains the Log4J 2 and other critical security patches.

0 votes

Comments
Delhiganesh Sabapathy
Nov 13 '23, 3:51 a.m.
Hi Ralph, Thanks for the update. There are few options in WebSphere admin console under SSL certificate and key management > Manage FIPS 1. Enable FIPS 140-2 ( Update SSL configurations to require TLS) 2. Enable SP800-131  a. Transition  Update SSL configurations to require TLS and accept TLSv1.2. b. Strict   Update SSL configurations to require TLSv1.2. 3.  Enable Suite B: Accept 128 bit keys  4.  Enable Suite B: Accept 192 bit keys  Can we use these options to enable TLS1.2? we need to perform this upgrade to connect to TLS1.2 LDAP server.  Thanks, Delhi

Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER Nov 13 '23, 3:55 a.m.
You can try out if it works for you, if it works, fine. As far as I can tell, the applications have to support TLS 1.2 themselves for real TLS 1.2 support. There are code changes, e.g. enable TLS 1.2 in the application.  

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 6,180

Question asked: Nov 12 '23, 7:53 p.m.

Question was seen: 5,035 times

Last updated: Nov 13 '23, 3:55 a.m.

Confirmation Cancel Confirm