Description:

TIBCO Runtime Agent 5.9.1 Hotfix 04 is available.

You can download this HotFix from the TIBCO Product Support ftp server, mft.tibco.com.  You will need to provide your  TSC (TIBCO Support Central) credentials.  Your username is your email address  to access the server.

Please note you should use an FTP or SFTP client or command-line FTP. TIBCO employees must use a secure protocol.

Server name: mft.tibco.com

Credentials: use your TSC (TIBCO Support Central website) login.

Browser:  https://mft.tibco.com

FTP: port 21

SFTP: port 22

Once you have successfully logged into the server, go to /AvailableDownloads/TRA_Designer/5.9.1/hotfix-04/ to download the fix.

NOTE: If you are using TIBCO ActiveMatrix BusinessWorks 5.12 then you have to install BW 5.12 HF-05 or latest HF , refer LBN 44692 for more details.

================================================================================

Introduction

Hotfixes are cumulative. This hotfix includes all previous generally available

hotfixes for TIBCO Runtime Agent 5.9.1.

For details please review the attached TIB_TRA_5.9.1_HF-004_readme.txt

================================================================================

Closed Issues in 5.9.1_HF-004 (This Release)

TRA-3923

TIBCO Runtime Agent now includes TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher suite 

for JSSE implementation; relevant when communicating with old SSL Servers 

which do not have complete support for renegotiation.

TRA-3922

TIBCO Runtime Agent now supports properties to disable TLS protocol which 

are enabled by default.

For backward compatibility, you can disable the following TLS and SSLv protocols:

To disable TLS v1.0, set com.tibco.security.ssl.client/server.EnableTLSv1 to 

false.  

To disable TLS v1.1, set com.tibco.security.ssl.client/server.EnableTLSv11 to 

false.

To disable TLS v1.2, set com.tibco.security.ssl.client/server.EnableTLSv12 to 

false.

To disable SSLv2Hello, set com.tibco.security.ssl.server.EnableSSLv2Hello to 

false.

SSLv3 is set to false by default. To enable SSLv3, set 

com.tibco.security.ssl.client/server.EnableSSLv3 to true. 

================================================================================