Policy Manager 10.1 support TLS1.3 version complies with RFC 8446 protocol

Products

• CA API Gateway

Issue/Introduction

In Policy Manager 10.1, is TLS1.3 compliant with the RFC 8446 protocol?

Environment

API Gateway: 10.1

Resolution

It should be compliant to the extent of JDK 11 support for RFC 8446. Java supports mandatory TLS 1.3 cipher suites but some optional cipher suites are not supported.

Currently, JDK 11 supports only 2 out of 5 cipher suites defined by TLS 1.3 RFC 8446:

TLS_AES_128_GCM_SHA256
TLS_AES_256_GCM_SHA384