Can SmartConncetors be configured to run in TLS v1.2 with aes256 encryption?
Application Delivery Management
Application Modernization & Connectivity
CyberRes by OpenText
IT Operations Management
Can SmartConncetors be configured to run in TLS v1.2 with aes256 encryption?
Hello,
please check agent.default.properties:
<connector_home>/current/config/agent/agent.defaults.properties
Find following setting (these are available from SmartConnector):
# The protocols will be used during SSL handshake negotiations in the order in which they are mentioned
ssl.protocols=TLSv1.2,TLSv1.1,TLSv1
Delete the protocols (do not do it in agent.default.properties) that you do not use (ESM Destination has to have enabled the cypher that you will use on Connector). Please check this KB on how to do it on ESM KM02267699.
Add this modified line to agent.properties:
<connector_home>/current/user/agent/agent.properties
For example to use only TLS 1.2:
ssl.protocols=TLSv1.2
Restart SmartConnecotor to apply settings.
Regards,
Marijo
Hello,
1) Best answer for this would be to test (bit tight on time).
2) My order for SmartConnector was like that because I copied it from agent.defaults.properties
3) What I expect that SmartConnector will offer what he has by order and ESM will just accept it or deny it (if it does not support it).
4) If you want to be sure, then on both sides use matching protocol so they can agree only on 1 option.
Regards,
Marijo