Petals Distribution

Moved SSL certificate keys from DSA to RSA

View this issue in another formatViewView
- XML
- Word
- Printable

Details

Type: Task
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: 5.2.0, CP-5.2.0
Fix Version/s: 5.3.0, CP-5.3.0
Component/s: Clients, Components, Container, Packaging, Registry Overlay, Shared library, Tools
Security Level: Public

Description:

Hide

By default with Java 11, TLSv1.3 is activated for SSL. As DSA certificates are not supported anymore in TLS1.3, new SSL certificates must be created and used based on RSA.

See: https://stackoverflow.com/questions/57601284/java-11-and-12-ssl-sockets-fail-on-a-handshake-failure-error-with-tlsv1-3-enable

Show
By default with Java 11, TLSv1.3 is activated for SSL. As DSA certificates are not supported anymore in TLS1.3, new SSL certificates must be created and used based on RSA. See: https://stackoverflow.com/questions/57601284/java-11-and-12-ssl-sockets-fail-on-a-handshake-failure-error-with-tlsv1-3-enable

Environment:

-

Issue Links

Depends

This issue blocks:
~~PETALSBCSOAP-221~~ Move to Java 11
~~PETALSDISTRIB-416~~ Move to Java 11

Activity

Ascending order - Click to sort in descending order

No work has yet been logged on this issue.

People

Assignee:

Christophe DENEUX

Reporter:

Christophe DENEUX
Watchers:

0

Dates

Created:

Fri, 5 Mar 2021 - 10:14:03 +0100

Updated:

Fri, 5 Mar 2021 - 10:16:36 +0100

Resolved:

Fri, 5 Mar 2021 - 10:16:36 +0100