How to enable or disable specific cipher suites in TIBCO ActiveMatrix BusinessWorks™

How to enable or disable specific cipher suites in TIBCO ActiveMatrix BusinessWorks™

book

Article ID: KB0070667

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks 5.14.x, 5.15.x

Description

By default, all the available cipher suites (which depends on the JRE version, the settings in Java security properties file etc.) are enabled on BW side. The following properties can be used to enable or disable specific cipher suites.

com.tibco.security.ssl.includeCiphers
com.tibco.security.ssl.excludeCiphers

One or more JSSE cipher suite names and/or regular expressions can be specified. Separate cipher suite names or expressions using commas, semicolons or spaces. JSSE cipher suite names can be found at https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#ciphersuites. 

Resolution

com.tibco.security.ssl.includeCiphers

The list of cipher suites to be used. For example, to use the cipher suites TLS_RSA_WITH_AES_128_CBC_SHA256 and TLS_RSA_WITH_AES_128_CBC_SHA, set the property as follows.

java.property.com.tibco.security.ssl.includeCiphers=TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA

com.tibco.security.ssl.excludeCiphers

The list of cipher suites to be excluded. For example, to exclude the cipher suites TLS_RSA_WITH_AES_128_CBC_SHA256 and TLS_RSA_WITH_AES_128_CBC_SHA, set the property as follows.

java.property.com.tibco.security.ssl.excludeCiphers=TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA

Issue/Introduction

This article discusses the properties that could be used to enable or disable specific cipher suites in TIBCO ActiveMatrix BusinessWorks™ (BW)