What changes will take place in IS if DB has been enabled with TLSv1.2 protocol

, , ,
1

Hi All

We are using Integration server 10.7 with oracle as db server.
Our oracle server is been enabled a TLSv1.2, and now we are making changed to JDBC Pool settings with new connection string:-
jdbc:wm:oracle://dbserverhostname:1521;sid=xyz;EncryptionMethod=ssl;CryptoProtocolVersion=TLSv1.2;ValidateServerCertificate=false
But getting the below error while testing connection:-
SoftwareAG][Oracle JDBC Driver]Error during renegotiation of SSL socket.

Are there any changes in server configuration which we need to do before changing this connection?

2

Hello there,
Your platform should support TLSv1.2, but can you check that you haven’t changed the setup i.e. check that the extended setting is set to default.

watt.net.ssl.client.cipherSuiteList=Default

In addition you will need to configure a proper key store and certs for SSL transport.

enable SSL debugging to get more information about why the connection is failing and post it here. To enable SSL debugging, edit the following file

<SAG_HOME>/profiles/IS_Default/configuration/customer_wrapper.conf

and add the following lines, afterwards stop and restart your server

wrapper.java.additional.443=-Djavax.net.debug=all
wrapper.java.additional.444=-Djava.security.debug=certpath

make sure 443 and 444 are available in the file, otherwise change the numbers to be unique.

Additional logging will then be traced in the following file

<SAG_HOME>/profiles/IS_Default/logs/wrapper.log

good luck,
John.

3

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.