Hello Sergey,
Sorry to hear this affected your application. A colleague explained to me that the change comes from an OpenJDK change to improve JSSE:
https://bugs.openjdk.org/browse/JDK-8245545
It's mentioned on the Oracle JRE and JDK Cryptographic Roadmap
https://www.java.com/en/jre-jdk-cryptoroadmap.html
"Disable TLS_RSA Cipher Suites"
IBM doesn't attempt to make release notes for all the OpenJDK changes, so the roadmap page above is a valuable resource for this type of change.
-- Will Smith, IBM support (Java and Semeru on z/OS)
------------------------------
Will SMITH
------------------------------
Original Message:
Sent: Wed April 22, 2026 10:08 AM
From: Sergey Korzhevsky
Subject: Java 17.0.18 TLS 1.2 problem
Hi Jon,
Yes, updating java.security works, also we can specify additional cipher suites in C/C++ application, which are not disabled. I'm just thinking, that it would be good to specify such changes explicitly in release notes.
Thanks.
------------------------------
Sergey Korzhevsky
Senior Software Engineer in Test
Rocket Software
------------------------------
Original Message:
Sent: Wed April 22, 2026 09:23 AM
From: Jon Furminger
Subject: Java 17.0.18 TLS 1.2 problem
Hello,
This suggests that the previous working system was using an RSA based cipher suite. Did you try changing the disabledAlgorithms and retrying?
------------------------------
Jon Furminger
Original Message:
Sent: Tue April 21, 2026 06:10 AM
From: Sergey Korzhevsky
Subject: Java 17.0.18 TLS 1.2 problem
We found, this is "TLS_RSA_*" in jdk.tls.disabledAlgorithms (conf/security/java.security)
------------------------------
Sergey Korzhevsky
Senior Software Engineer in Test
Rocket Software