Webservice publisher moving to TLS1.1

314 views Asked by At

We are consuming a web-service from a publisher. Our current configuration for Java is version 1.6. So, we have generated stubs using Axis2 and our application is hosted on tomcat7.

Now, the publisher of that webservice says that it would be moving to TLS1.1 and would stop disable the SSLv3 and TLS1.0 security protocols.

How do I ensure, that we, as a client, are compliant to this new protocol. And, if not, what steps are needed for that.

1

There are 1 answers

0
Kaushal Kumar Panday On

Support for TLS 1.1 is included in the update 111 and higher for Java 1.6. See this for reference: TLS & Java

You should recompile your app against the newer update and see if that works.

Also, there are issues with TLS 1.0 & TLS 1.1, so you may need to consider to upgrade to Java 8 and start using TLS 1.2. But again, this is not a simple decision if you are supporting legacy SSL/TLS clients.