4.3 TLS Version Configuration
The following table summarizes the default TLS version for each Tuxedo component and provides configuration options for changing it.
Table 4-2 TLS Version Configurations
| TLS Client | TLS Server | ||||
|---|---|---|---|---|---|
| Component | Default Version | Configurations Option | Component | Default Version | Configuration Option |
| Workstation client | TLSv1.3_1.2 | Environment variable WSNADDR. For example: WSNADDR="//host1:8810;TLSv1.3"
|
Workstation Listener/Handler | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| JOLT client | TLSv1.3_1.2 |
Java property System.setProperty("bea.jolt.tls.version" "TLSv1.3"); |
JOLT Listener/Handler | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| CORBA client | TLSv1.3_1.2 | The Tobj_Bootstrap constructor naddress parameter or the environment variable TOBJADDR |
CORBA Listener/Handler | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| BRIDGE | TLSv1.3_1.2 | Not Supported | BRIDGE | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| tmboot/tmshutdown | TLSv1.3_1.2 | Not Supported | tlisten | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| GWTDOMAIN | TLSv1.3_1.2 | Configuration option DM_TDOMAIN/TLSversion in DMCONFIG file. For example:TLSversion=TLSv1.3 |
GWTDOMAIN | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| External Web service client | N/A | N/A | GWWS | TLSv1.3_1.2 | Environment variable TM_TLS_FORCE_VER |
| GWWS | TLSv1.3_1.2 | Attribute tlsversion in element Endpoint in SALTDEPLOY file. For example:<Endpoint address="..."
tlsversion="TLSv1.3"/> |
External Web service server | N/A | N/A |
| LMS | TLSv1.3_1.2 | Not Supported | TSAM Plus Manager | See WebLogic Server document | See WebLogic Server document |
Note:
Configuration options such as environment variableTM_TLS_FORCE_VER supports the following values. Any other values are ignored, and the default TLS version will be used.
- TLSv1.2
- TLSv1.3
- TLSv1.3_1.2
Parent topic: Quick Reference for TLS Support