Disable TLS 1.1 in Reporting Server

[Yahya.Alsemaiyen]

Greetings,

I need to disable TLSv1.1 from our setup. I was able to follow the documentation about doing so for the Controller server. However, there seem to be no reference for the reporting service. 

I need your help to guide me on how to disable it. 

FYI: both services are installed on the same host. So, if HTTPS is not needed to communicate with the Controller, I can go ahead and disable it from the reporting service. 

[Haluk Yaşar.Erol]

Hello ,

It can be closed via load balancer(F5).

Tls I closed it this way. If this method is not preferred, it can be closed with java configuration.

java.security file, add TLSv1 and TLSv1.1 to the existing value of the property jdk.tls.disabledAlgorithms "jdk.tls.disabledAlgorithms = SSLv2Hello, SSLv3, TLSv1, TLSv1.1"

You should check application access when closed via java

[Yahya.Alsemaiyen]

Haluk,

The load balancer is not an option, because security scanning is done inside the server. 

As for JAVA option, which script calls the startup of the reporting server, so I can add this portion. 

We previously have done the below for WebLogic

-Dweblogic.security.SSL.protocolVersion=TLS1.2 -Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.2

[Yahya.Alsemaiyen · Accepted solution]

I have just fixed it. Here is how

CD into {app_dyn_installation_folder}/Controller/reporting_service/reports/lib/server/

Add the blue text to server.js and ReportServer.js as follows:

secureOptions: constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_TLSv1 | constants.SSL_OP_NO_TLSv1_1 ,

[Haluk Yaşar.Erol]

Yes, it can be done in this way, but different problems do not occur? If it happens, I would like you to share it.

I also faced problems that I closed in java before. Controller was resolved after the upgrade.