The last update appears to have disabled TLS-1.0 and TLS-1.1

Products

• CA API Gateway

Issue/Introduction

We applied an update and that appears to have stop support of TLS-1.0 and TLS-1.1.  We still need those for legacy app support.  We have enabled in the OS but now that doesn't work anymore.  We need help to find a solution. 

Environment

Release : 10.1

Resolution

How to re-enable deprecated TLS protocols

Workaround - not recommended gateway restart required (NOTE protocol needs to be check in the listening port 

Edit the file /opt/SecureSpan/Gateway/runtime/etc/ssg.security to customize java security add the BOLD to the end 

# For the Tomcat 9.0.x Upgrade feature

authconfigprovider.factory=org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl

 

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, \

DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \

include jdk.disabled.namedCurves

Restart Gateway then enabling TLS 1.0 or 1.1 to listening ports needed this protocol