TLS1.2 enable for IBM WebSphere with SSL Handshake Debug
>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's
-Dhttps.protocols=TLSv1.2
-Dcom.ibm.ssl.protocol=TLSv1.2
-Dcom.ibm.jsse2.overrideDefaultTLS=true
-Djdk.tls.client.protocols=TLSv1.2
-Djdk.tls.server.protocols=TLSv1.2
-Djavax.net.debug=ssl,handshake,data,trustmanager
JVM arguments, To ADD cacerts as Truststore & SSL debug
>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's
-Djavax.net.ssl.trustStore=$JAVA_HOME/java/8.0/jre/lib/security/cacerts
-Djavax.net.ssl.trustStorePassword=changeit
-Djavax.net.ssl.trustStoreType=jks
-Dhttps.protocols=TLSv1.2
-Dcom.ibm.ssl.protocol=TLSv1.2
-Dcom.ibm.jsse2.overrideDefaultTLS=true
-Djdk.tls.client.protocols=TLSv1.2
-Djdk.tls.server.protocols=TLSv1.2
-Djavax.net.debug=ssl,handshake,data,trustmanager
IMPORT Certificate on cacerts file:
Command:
$JAVA_HOME/bin/keytool -import -trustcacerts -file certificate.cer -alias www.certificate.com -keystore $JAVA_HOME/java/8.0/jre/lib/security/cacerts
For LDAP SSL Handshake identificatation issue "CWWIM4520E The 'javax.naming.CommunicationException: myldap.ibm.com:636"
>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's
-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true
Thanks :-)
