TLS1.2 Protocol enable for IBM WebSphere with SSL Handshake Debug

 

TLS1.2 enable for IBM WebSphere with SSL Handshake Debug

>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's

-Dhttps.protocols=TLSv1.2

-Dcom.ibm.ssl.protocol=TLSv1.2

-Dcom.ibm.jsse2.overrideDefaultTLS=true

-Djdk.tls.client.protocols=TLSv1.2

-Djdk.tls.server.protocols=TLSv1.2

-Djavax.net.debug=ssl,handshake,data,trustmanager

JVM arguments, To ADD cacerts as Truststore & SSL debug

>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's

-Djavax.net.ssl.trustStore=$JAVA_HOME/java/8.0/jre/lib/security/cacerts 

-Djavax.net.ssl.trustStorePassword=changeit 

-Djavax.net.ssl.trustStoreType=jks 

-Dhttps.protocols=TLSv1.2

-Dcom.ibm.ssl.protocol=TLSv1.2

-Dcom.ibm.jsse2.overrideDefaultTLS=true

-Djdk.tls.client.protocols=TLSv1.2

-Djdk.tls.server.protocols=TLSv1.2

-Djavax.net.debug=ssl,handshake,data,trustmanager

IMPORT Certificate on cacerts file:

Command:

$JAVA_HOME/bin/keytool -import -trustcacerts -file certificate.cer -alias www.certificate.com -keystore $JAVA_HOME/java/8.0/jre/lib/security/cacerts

For LDAP SSL Handshake identificatation issue  "CWWIM4520E The 'javax.naming.CommunicationException: myldap.ibm.com:636"

>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's

-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true

Thanks :-)