WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Message meaning with SSL QOP settings

  • 1.  Message meaning with SSL QOP settings

    Posted Tue May 08, 2018 01:57 PM

    The QOP settings for our CellDefaultSSLSettings and
    NodeDefaultSSLSettings are SSL_TLSv2. In our servers we see:
    com_ibm_DAEMON_protocol_SSLv2_enabled: NOT SET, DEFAULT=0.
    com_ibm_DAEMON_protocol_SSLv3_enabled: NOT SET, DEFAULT=1.
    com_ibm_DAEMON_protocol_TLSv1_enabled: NOT SET, DEFAULT=1.
    com_ibm_DAEMON_protocol_TLSv1_1_enabled: NOT SET, DEFAULT=0.
    com_ibm_DAEMON_protocol_TLSv1_2_enabled: NOT SET, DEFAULT=0.

    It seems these message say that the TLS settings are not set.
    Also, I noticed that settting for DefaultIIOPSSL is SSL_TLS. How will
    this affect things? Applications area is worried that they are not using
    TLS v1.2 and it appears they are not. I believe it is because our
    http servers are using TLS 1.0.

    This is z/OS WebSphere V7