What is the alternative method to disable SSL protocols in TIBCO Data Virtualization Business Directory?

What is the alternative method to disable SSL protocols in TIBCO Data Virtualization Business Directory?

book

Article ID: KB0070725

calendar_today

Updated On:

Products Versions
TIBCO Data Virtualization All Supported Versions

Description

The usual method to disable the SSL protocols is given in the TIBCO Business Directory API documentation(see reference section). This article explains an alternative method to disable protocols for SSL connectors in the TIBCO Business Directory.

Environment

Windows/Linux

Resolution

1. Navigate to "<Business Directory-INSTALL-DIR>\bd\conf\server" and open the 'server_values.xml' file in a text editor, such as Notepad. Within the file, locate the /server/communications/sslProtocolsToRemove attribute and make the necessary changes. For example, if the user needs to disable the DTLSv1.0 and DTLSv1.2 protocols, then make the following changes.
------------------------------------------
<common:attribute>
    <common:name>/server/communications/sslProtocolsToRemove</common:name>
    <common:type>STRING</common:type>
    <common:value>SSLv2Hello,SSLv2,SSLv3,DTLSv1.0,DTLSv1.2</common:value>
  </common:attribute>
------------------------------------------

2. Restart the TIBCO Business Directory server. 
3. Navigate to "<Business Directory-INSTALL-DIR>\logs" where the user can find information about excluded protocols for TIBCO Business Directory in the 'cs_bd_server.log' file, as shown below:
------------------------------------------
INFO [main] 2023-11-23 11:31:28.309 +0530 CompositeServer - Setting excluded SSL protocols for Jetty HTTPS connector to [SSLv2Hello, SSLv2, SSLv3, DTLSv1.0, DTLSv1.2]
------------------------------------------

Issue/Introduction

This article explains an alternative method to disable protocols for SSL connectors in the TIBCO Data Virtualization Business Directory

Additional Information

https://docs.tibco.com/pub/tdv/8.8.0/doc/html/en-US/StudioHelp/Security-Features/SSL_Protocol_Configuration.html

This documentation mentions the "_server_communications_sslProtocolsToRemove" API that the user could use to discard the protocols.