AnsweredAssumed Answered

Question about Java7 and TLS1.2 support

Question asked by Dan Goldberg on Feb 19, 2018
Latest reply on Feb 20, 2018 by Rob Moss

Hi I have a question about Java7 and TLS1.2 and if the SSLLabs page is correct or needs updating.

According to: https://www.ssllabs.com/ssltest/viewClient.html?name=Java&version=7u25&key=26 TLS1.2 is not supported

"TLS 1.2 No"

Oracle Claims TLS1.2 is supported for Java7 here: https://blogs.oracle.com/java-platform-group/diagnosing-tls,-ssl,-and-https 
and in my own testing, I can connect with TLS1.2:

 

import java.net.URL;
public class Main {

public static void main(String args[]) throws Exception {
  URL u = new URL("https://someHTTPSUrl/");
  Object o = u.getContent();
  System.out.println( o.getClass().getName());
}

compile with java7, and run (on Windows server) with 
C:\Program Files\Java\jdk1.7.0_15\bin\java" -Dhttps.protocols="TLSv1.2" Main

and
C:\Program Files\Java\jdk1.7.0_15\bin\java" Main
The target I used is behind an AWS ALB set to support TLS1 and TLS1.2

The ALB logs recorded the appropriate TLS 1.0 and TLS 1.2 entry along with both returning values indicating a connection.

 

My question is am I missing something, is my testing invalid or does the java7 page need updating? Yes I am quite aware that this is a lot of trouble to go through for software that belongs in the /dev/null. 

thanks Dan

Outcomes