Is Endevor WebServies compatible with TLS 1.3 ?

Products

• Endevor

Issue/Introduction

Based on the Apache Tomcat 9 document, Tomcat 9 supports TLS 1.3.

Environment

Endevor v19

Resolution

If Tomcat 9 is used to install Endevor web services, then TLS 1.3 can be used as one of the sslEnabledProtocols to secure the connection to Endevor.

   <Connector port="30308" maxHttpHeaderSize="8192"
          maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
          enableLookups="false" disableUploadTimeout="true"
          SSLEnabled="true"
          algorithm="IbmX509"
          acceptCount="100" scheme="https" secure="true"
          clientAuth="false" sslProtocol="TLS"
          sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1.3"
          keystoreType="JCERACFKS"
          keystoreFile="safkeyring://KEY_RING_OWNER/KEY_RING_NAME"
          sslImplementationName="com.ca.sslsocket.CASSLImplementation" />

 

Additional Information

Common Service ENF is used to spawn Web Services spawn task (STC),  apply SO12236 for CA common services v15.0,  this PTF adds TLS 1.3 support to CAICCI.