<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
IDP v2.4.3 is really old! Perhaps your version of Java is also really old and doesn't support TLS v1.2 by default?</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
My Google search for "java supported tls versions" shows that Java 6 and Java 7 will not use TLS v1.2 by default unless you add some parameters to Java's command-line arguments.</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
You should be upgrading to IDP v3, too...</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div>
<div id="Signature">
<div></div>
<div></div>
<div style="font-family:"Courier New",monospace; font-size:12pt; color:rgb(0,0,0)">
<span style="font-family:Arial,Helvetica,sans-serif">Andy Morgan</span><span><br>
</span></div>
<div style="font-family:"Courier New",monospace; font-size:12pt; color:rgb(0,0,0)">
<div><span style="font-family:Arial,Helvetica,sans-serif">Identity & Access Management</span><br>
</div>
<div><span style="font-family:Arial,Helvetica,sans-serif">Oregon State University</span><br>
</div>
</div>
</div>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Brian Southern <briansouthern24@gmail.com><br>
<b>Sent:</b> Monday, November 25, 2019 11:30 AM<br>
<b>To:</b> users@shibboleth.net <users@shibboleth.net><br>
<b>Subject:</b> IDP 2.4.3 LDAP Connection over TLS 1.2</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Our IdP 2.4.3 is currently configured to connect to Active Directory for the LDAP authentication, however we recently found that it only appears to use TLS 1.0 for this connection. We'd like to upgrade this to only use TLS 1.2. Both the IdP and AD servers
are running on Windows Server, and with the registry on both systems set to only permit TLS1.2 we still see (via network packet captures) that the IdP connection only attempts to use TLS 1.0.
<br>
</div>
<div><br>
</div>
<div>Can someone please help describe how to configure the IdP to use TLS 1.2 for the LDAP conenction, or point me to the documentation that describes what TLS versions are supported with this older version of IdP?</div>
<div><br>
</div>
<div>Thank you.<br>
</div>
</div>
</div>
</div>
</body>
</html>