TLS1.2 Protocol enable for IBM WebSphere with SSL Handshake Debug

 

TLS1.2 enable for IBM WebSphere with SSL Handshake Debug

>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's

-Dhttps.protocols=TLSv1.2

-Dcom.ibm.ssl.protocol=TLSv1.2

-Dcom.ibm.jsse2.overrideDefaultTLS=true

-Djdk.tls.client.protocols=TLSv1.2

-Djdk.tls.server.protocols=TLSv1.2

-Djavax.net.debug=ssl,handshake,data,trustmanager

JVM arguments, To ADD cacerts as Truststore & SSL debug

>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's

-Djavax.net.ssl.trustStore=$JAVA_HOME/java/8.0/jre/lib/security/cacerts 

-Djavax.net.ssl.trustStorePassword=changeit 

-Djavax.net.ssl.trustStoreType=jks 

-Dhttps.protocols=TLSv1.2

-Dcom.ibm.ssl.protocol=TLSv1.2

-Dcom.ibm.jsse2.overrideDefaultTLS=true

-Djdk.tls.client.protocols=TLSv1.2

-Djdk.tls.server.protocols=TLSv1.2

-Djavax.net.debug=ssl,handshake,data,trustmanager

IMPORT Certificate on cacerts file:

Command:

$JAVA_HOME/bin/keytool -import -trustcacerts -file certificate.cer -alias www.certificate.com -keystore $JAVA_HOME/java/8.0/jre/lib/security/cacerts

For LDAP SSL Handshake identificatation issue  "CWWIM4520E The 'javax.naming.CommunicationException: myldap.ibm.com:636"

>> Add below arguments on JVM java_options on NodeAgent, servers, Dmgr JVM's

-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true

Thanks :-)

How to make datasource test-connection to MSSQL DB Instance.

 Required Tool and Software: 

• OpenJDK / Oracle JAVA 
• dbconnect.jar
• mssql-jdbc-12.2.0.jre8.jar

Download link for dbconnect.jar and mssql.jar 

https://drive.google.com/drive/folders/1H0UI62dmVnAQmKmPSRMrztmzrq1y49to?usp=drive_link

TEST Connection for MSSQL, with SSL and NON_SSL :

Command: With SSL and Protocol TLS1.2:  

/opt/java_1.8_64/bin/java -cp /tmp/dbConnect.jar:/tmp/mssql-jdbc-12.2.0.jre8.jar com.sid.dbConnect "jdbc:sqlserver://123.456.123.789:44332;databaseName=MSSQLDB;encrypt=true;trustServerCertificate=false;sslProtocol=TLSv1.2;" "$USERNAME" ‘$PASSWORD’  com.microsoft.sqlserver.jdbc.SQLServerXADataSource

Command: Without SSL:

/opt/java_1.8_64/bin/java -cp /tmp/dbConnect.jar:/tmp/mssql-jdbc-12.2.0.jre8.jar com.sid.dbConnect "jdbc:sqlserver://123.456.123.789:44332;databaseName=MSSQLDB" "$USERNAME" ‘$PASSWORD'  com.microsoft.sqlserver.jdbc.SQLServerXADataSource

Add below parameter on JVM arguments if you were facing SSL_protcol_Handshake issue on WebSphere Application server / WebSphere liberty.

-Dcom.ibm.jsse2.overrideDefaultTLS=true

Thanks :-)

How to make datasource test-connection to Postgresql DB Instance.

 

Required Tool and Software: 

• OpenJDK / Oracle JAVA 
• dbconnect.jar
• postgresql-42.6.0.jar

Download link for dbconnect.jar and postgresql-42.6.0.jar

https://drive.google.com/drive/folders/1H0UI62dmVnAQmKmPSRMrztmzrq1y49to?usp=drive_link

TEST Connection for POSTGRESQL,

Command:

/usr/bin/java -cp /home/app/test/dbConnect.jar:/home/app/test/postgresql-42.6.0.jar com.sid.dbConnect jdbc:postgresql://123.456.123.789:1234/postgres  “$username” ‘$Password’  org.postgresql.Driver

Add below parameter on JVM arguments if you were facing SSL_protcol_Handshake issue on WebSphere Application server / WebSphere liberty.

-Dcom.ibm.jsse2.overrideDefaultTLS=true

Thanks :-)

How to make datasource test-connection to Oracle DB Instance.

 Required Tool and Software: 

• OpenJDK / Oracle JAVA 
• dbconnect.jar
• ojdbc8.jar

Download link for dbconnect.jar and ojdbc8.jar and other .jar’s 

https://drive.google.com/drive/folders/1H0UI62dmVnAQmKmPSRMrztmzrq1y49to?usp=drive_link

TEST Connection for Oracle,

Command:

/usr/bin/java -cp /opt/test/dbConnect.jar:/opt/test/ojdbc8.jar com.sid.dbConnect jdbc:oracle:thin:@123.789.123.456/SERVICENAME “$username”  ‘$Password’ oracle.jdbc.driver.OracleDriver

FYI , Class Name to be used on Datasource for  application servers to connect respective Oracle DB (11g / 12c / 19c ) :

 oracle.jdbc.xa.client.OracleXADataSource   (for 19c and 12c DB , ojdbc8.jar with JDK8 complied)

oracle.jdbc.pool.OracleConnectionPoolDataSource  (for 11g with minimum jDK7, JDK8 complied)

New JDBC String : LOADBALANCER and failover for ORACLE Datasource

jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=123.456.123.789)(PORT=1521))(ADDRESS=(PROTOCOL=TCP)(HOST=123.456.123.789)(PORT=1521))(FAILOVER=on)(LOAD_BALANCE=on))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=MY_SERVICE_NAME)))

Add below parameter on JVM arguments if you were facing SSL_protcol_Handshake issue on WebSphere Application server / WebSphere liberty.

-Dcom.ibm.jsse2.overrideDefaultTLS=true

Thanks :-)

How to make datasource test-connection to Oracle / PostgreSql / MSSQL DB Instance

Required Tool and Software: 

• OpenJDK / Oracle JAVA 
• dbconnect.jar
• ojdbc8.jar
• postgresql-42.6.0.jar
• mssql-jdbc-12.2.0.jre8.jar

Download link for dbconnect.jar and ojdbc8.jar and other .jar’s 

https://drive.google.com/drive/folders/1H0UI62dmVnAQmKmPSRMrztmzrq1y49to?usp=drive_link

TEST Connection for Oracle,

Command:

/usr/bin/java -cp /opt/test/dbConnect.jar:/opt/test/ojdbc8.jar com.sid.dbConnect jdbc:oracle:thin:@123.789.123.456/SERVICENAME “$username”  ‘$Password’ oracle.jdbc.driver.OracleDriver

TEST Connection for POSTGRESQL,

Command:

/usr/bin/java -cp /home/app/test/dbConnect.jar:/home/app/test/postgresql-42.6.0.jar com.sid.dbConnect jdbc:postgresql://123.456.123.789:1234/postgres  “$username” ‘$Password’  org.postgresql.Driver

TEST Connection for MSSQL, with SSL and NON_SSL :

Command: With SSL and Protocol TLS1.2:  

/opt/java_1.8_64/bin/java -cp /tmp/dbConnect.jar:/tmp/mssql-jdbc-12.2.0.jre8.jar com.sid.dbConnect "jdbc:sqlserver://123.456.123.789:44332;databaseName=MSSQLDB;encrypt=true;trustServerCertificate=false;sslProtocol=TLSv1.2;" "$USERNAME" ‘$PASSWORD’  com.microsoft.sqlserver.jdbc.SQLServerXADataSource

Command: Without SSL:

/opt/java_1.8_64/bin/java -cp /tmp/dbConnect.jar:/tmp/mssql-jdbc-12.2.0.jre8.jar com.sid.dbConnect "jdbc:sqlserver://123.456.123.789:44332;databaseName=MSSQLDB" "$USERNAME" ‘$PASSWORD'  com.microsoft.sqlserver.jdbc.SQLServerXADataSource

FYI , Class Name to be used on Datasource for  application servers to connect respective Oracle DB (11g / 12c / 19c ) :

•  oracle.jdbc.xa.client.OracleXADataSource   (for 19c and 12c DB , ojdbc8.jar with JDK8 complied)
• oracle.jdbc.pool.OracleConnectionPoolDataSource  (for 11g with minimum jDK7, JDK8 complied)

New JDBC String : LOADBALANCER and failover for ORACLE Datasource

jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=123.456.123.789)(PORT=1521))(ADDRESS=(PROTOCOL=TCP)(HOST=123.456.123.789)(PORT=1521))(FAILOVER=on)(LOAD_BALANCE=on))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=MY_SERVICE_NAME)))

Add below parameter on JVM arguments if you were facing SSL_protcol_Handshake issue on WebSphere Application server / WebSphere liberty.

-Dcom.ibm.jsse2.overrideDefaultTLS=true

Thanks :-)