How to enable or disable specific cipher suites in TIBCO ActiveMatrix BusinessWorks™
book
Article ID: KB0070667
calendar_today
Updated On:
Products
Versions
TIBCO ActiveMatrix BusinessWorks
5.14.x, 5.15.x
Description
By default, all the available cipher suites (which depends on the JRE version, the settings in Java security properties file etc.) are enabled on BW side. The following properties can be used to enable or disable specific cipher suites.
One or more JSSE cipher suite names and/or regular expressions can be specified. Separate cipher suite names or expressions using commas, semicolons or spaces. JSSE cipher suite names can be found at https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#ciphersuites.
Resolution
com.tibco.security.ssl.includeCiphers
The list of cipher suites to be used. For example, to use the cipher suites TLS_RSA_WITH_AES_128_CBC_SHA256 and TLS_RSA_WITH_AES_128_CBC_SHA, set the property as follows.
The list of cipher suites to be excluded. For example, to exclude the cipher suites TLS_RSA_WITH_AES_128_CBC_SHA256 and TLS_RSA_WITH_AES_128_CBC_SHA, set the property as follows.