Post

1 follower Follow
0
Avatar

Enforce TLS 1.2 for the storage connector

Here are the steps to disable TLSv1 and TLS1.1 on the node hosting the Storage Connector.

  1. Edit the java.security file located /usr/lib/jvm/java-1.8.0-openjdk-/jre/lib/security*
  2. Find the property in this file called "jdk.tls.disabledAlgorithms" and add “TLSv1.1,TLSv1” as follows:

jdk.tls.disabledAlgorithms=SSLv3,EC,ECDHE,ECDH,TLSv1.1,TLSv1

  1. Save the file and exit.
  2. Restart the Storage Connector service by typing the following command:

CentOS 7.X: sudo systemctl restart syncp-storage

CentOS 6.X: sudo service syncp-storage restart

Georgi Dragnev

Please sign in to leave a comment.