Error connecting to database

Get Help & Discuss
,
1

Hi!

I am getting the following error while trying to connect to the database: the server selected protocol version TLS10 is not accepted by client preferences TLS12

AE Version: 6.0

Java Version: OpenJDK 11

[https://ci3.googleusercontent.com/proxy/UvO1oCfpfVSqbl_nxFCy8Bk5WRUORbaLRSMii0_WuBfQKsZPoG9fsiQjiK5CeROniacDiPel1qh8p5Jt4ervJQxbYM8E67YGXGDKtz5lNL20OmHkRN46YV3e-FKfRPz2ugwDd8DcFP8F0fpp0OJems8BWUUf2KoMjbenIXevd5GAG8VC-ZFEu_26Hh7VjQ8xHiuPMtp5nNir_aLkaQrCoNxtnOl_STjVSMSSb496EuI5fSWF9i9ZC3o2aU-0IRQsktXTlAhgFWFZl-VIRfUVwk9HHwQRLh-42A=s0-d-e1-ft#https://support.automationedge.com/galleryDocuments/edbsned46aee98187538f2f6c85140079069f8d0ca88652c305b19dd637ec1f64564a638d570a2211a1a0a3215303a67b7d0a95f700c292c6c920c2f6d7ebf7d96150?inline=true]

2

Hi!

Follow the steps below.

  • OpenJDK will be disabling TLS 1.0 and 1.1 availability by default in java.security file. Java applications using TLS to communicate will need to use TLS 1.2 or above to establish a connection.
  • To re-enable the TLS 1.0 and 1.1 in OpenJDK, do the following steps:
  • Edit java.security file from OpenJDK/conf/Security folder

Option 1 (preferred): First, ensure security.overridePropertiesFile value in the java.security file is set to true (this is usually the default value).

Then, take the following steps:

  • Create a file named enableLegacyTLS.security
  • In that file, add an entry for jdk.tls.disabledAlgorithms with the same contents as the jdk.tls.disabledAlgorithms property in java.security file.
  • Remove TLSv1.0 and/or TLSv1.1 from the list on the enableLegacyTLS.security.
  • Start your application with -Djava.security.properties=path/to/enableLegacyTLS.security

Option 2: You can edit this value in java.security file directly. Search for the property jdk.tls.disabledAlgorithms. For OpenJDK 11, its contents will be similar to:

jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL,
include jdk.disabled.namedCurves

By removing the TLSv1.1 and/or TLSv1 entries, you can re-establish those versions back to the list of usable versions within the JDK.