B2B Data Exchange Installation and Configuration Guide

10.5.3
- 10.5.0
- 10.4.0
- 10.2.3
- 10.2.2 HotFix 1
- 10.2.1
- 10.2

Back Next

Enable Transport Layer Security version 1.3

Transfer Layer Security (TLS) version 1.3 provides several improvements over the earlier versions such as, simpler and faster TLS handshake, more secure cipher suites, and so on.

Perform the following steps to enable TLSv1.3 on

B2B Data Exchange

server:

Download the latest available ZULU JDK version 1.8 and deploy it on the machine where the

B2B Data Exchange

server was deployed.

Replace the value of JAVA_HOME variable value with the JDK home path where the latest java was deployed (in

setenv.sh/setenv.bat

<DX_HOME>/bin

For example:

JAVA_HOME="/root/jdk_1.8_u302/zulu8.56.0.21-ca-jdk8.0.302-linux_x64"

Remove the comments to update the

JAVA_OPTS

variable value in

setenv.sh/setenv.bat

present in

<DX_HOME>/bin

Uncomment the "if-else" block.

For example:

#rem uncomment below lines to use OpenJSSE instead of SunJSSE for TLSv1.3
if [ -z "$JAVA_OPTS" ] ; then
 JAVA_OPTS="-XX:+UseOpenJSSE"
else
 JAVA_OPTS="${JAVA_OPTS} -XX:+UseOpenJSSE"
if
export JAVA_OPTS

Add the following line in the

dx-configuration.properties

file present in

<DX_HOME>/conf/server

location:

dx.embedded.tomcat.ssl.sslEnabledProtocols=TLSv1.3

Modify the following fields in the

server.xml

file present in

<DX_HOME>/tomcat/conf

location:

Update sslEnabledProtocols value to TLSv1.3 in the Connector tag section for secure port.

Remove the existing ciphers and update it with the following ciphers:

TLS_AES_256_GCM_SHA384

TLS_CHACHA20_POLY1305_SHA256

TLS_AES_128_GCM_SHA256

If you require both TLSv1.2 and TLSv1.3, update the above ciphers to the existing list.

Ensure that the keystoreType type value is "PKCS12".

Update the keystoreProvider value from "SUNJSSE" to "OpenJSSE".

For example:

<Connector port="18443" maxHttpHeaderSize="8192" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" minSpareThreads="25"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true"
               clientAuth="false"
               sslProtocol="TLS" sslEnabledProtocols="TLSv1.3"
               URIEncoding="UTF-8"
                           compression="on"
                           compressionMinSize="2048"
                           noCompressionUserAgents="gozilla, traviata"
                           compressableMimeType="text/html,text/xml,text/css,text/javascript,application/javascript,application/json"
                           ciphers="TLS_AES_256_GCM_SHA384,
                                    TLS_CHACHA20_POLY1305_SHA256,
                                    TLS_AES_128_GCM_SHA256"
               keystoreType="PKCS12"
               keystoreFile="conf/Default.keystore"
               keystorePass="changeit"
               keystoreProvider="OpenJSSE"
               server="unknown"
        />

Rename Saved Search

Table of Contents

B2B Data Exchange Installation and Configuration Guide

B2B Data Exchange Installation and Configuration Guide

Enable Transport Layer Security version 1.3

Enable Transport Layer Security version 1.3