Java Security

TLS and SSL

On this page will be important information about Java Security. Mostly regarding the TLS and SSL protocols (ciphers).

Testing tool:

https://testssl.sh/testssl.1.html

Java 6u45 (SAP PI)

Java 6 is very specific and currently support only TLS 1.0, SSL 2 and SSL 3. To be able to make SSL connection from Java 6 it has to be allowed on web server SSLv2Hello, which will allow SSLv2 handshake and after that TLS 1.0 connection.

• https://www.ssllabs.com/ssltest/viewClient.html?name=Java&version=6u45&key=25
• https://community.qualys.com/thread/17245-does-java-6u45-support-tls-10-in-that-case-why-the-automatic-test-ignores-it-and-proceed-with-next-device-simulation
• https://blogs.oracle.com/java-platform-group/diagnosing-tls,-ssl,-and-https