IV45696: PROVIDE SYSTEM PROPERTY TO ALLOW SETTING OF ENABLED PROTOCOLS WH EN DEFAULT SSLSERVERSOCKETFACTORY OR SSLSOCKETFACTORY IS USED

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Provide system property to allow setting of enabled protocols
  when default SSLServerSocketFactory or SSLSocketFactory is used.
  Use of this system property is not recommended.  Use explicit
  setting of SSLProtocol instead.  This will avoid the
  complications of system properties.
   * com.ibm.jsse2.overrideDefaultProtocol = SSLv3 <HAT>00 SSL_TLS
  <HAT>00 SSL_TLSv2 <HAT>00 TLS <HAT>00 TLSv11 <HAT>00 TLSv12
   *       default - not set
   *       SSLv3   - set default enabled protocol to SSLv3
   *       SSL_TLS - set default enabled protocols to SSLv3 and
  TLS 1.0
   *       SSL_TLSv2 - set default enabled protocols to SSLv3, TLS
  1.0, TLS 1.1 and TLS 1.2
   *       TLSv1   - set default enabled protocol to TLS 1.0
   *       TLSv1.1 - set default enabled protocol to TLS 1.1
   *       TLSv1.2 - set default enabled protocol to TLS 1.2
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR15
  6.0.1 SR7
  7.0.0 SR6
  .
  7.0sr6, 6.26sr7, 6.0sr15.  ibmjsseprovider2.jar dated 20130703
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP

• R260 PSY

     UP