What is the alternative method to disable SSL protocols in TIBCO Data Virtualization Business Directory?
book
Article ID: KB0070725
calendar_today
Updated On:
Products
Versions
TIBCO Data Virtualization
All Supported Versions
Description
The usual method to disable the SSL protocols is given in the TIBCO Business Directory API documentation(see reference section). This article explains an alternative method to disable protocols for SSL connectors in the TIBCO Business Directory.
Environment
Windows/Linux
Resolution
1. Navigate to "<Business Directory-INSTALL-DIR>\bd\conf\server" and open the 'server_values.xml' file in a text editor, such as Notepad. Within the file, locate the /server/communications/sslProtocolsToRemove attribute and make the necessary changes. For example, if the user needs to disable the DTLSv1.0 and DTLSv1.2 protocols, then make the following changes. ------------------------------------------ <common:attribute> <common:name>/server/communications/sslProtocolsToRemove</common:name> <common:type>STRING</common:type> <common:value>SSLv2Hello,SSLv2,SSLv3,DTLSv1.0,DTLSv1.2</common:value> </common:attribute> ------------------------------------------
2. Restart the TIBCO Business Directory server. 3. Navigate to "<Business Directory-INSTALL-DIR>\logs" where the user can find information about excluded protocols for TIBCO Business Directory in the 'cs_bd_server.log' file, as shown below: ------------------------------------------ INFO [main] 2023-11-23 11:31:28.309 +0530 CompositeServer - Setting excluded SSL protocols for Jetty HTTPS connector to [SSLv2Hello, SSLv2, SSLv3, DTLSv1.0, DTLSv1.2] ------------------------------------------
Issue/Introduction
This article explains an alternative method to disable protocols for SSL connectors in the TIBCO Data Virtualization Business Directory