Ask Questions and Find Answers
Important:
Ask is now read-only. You can review any existing questions and answers, but not add anything new.
But - don't panic! While ask is no more, we've replaced it with discuss - the new Liferay Discussion Forum! Read more here here or just visit the site here:
discuss.liferay.com
RE: Can TLS 1.2 be enabled on Liferay 6.1.2. CE GA3 ?
Hi! after searching the web for a while, i'm still doubtful about this.
From what i understand, Liferay 6.1.2 has Java 6 embedded, which does not support TLSv1.2, and since upgrading to Java 7 is not an option right now (at least not in short term), i was wondering if there's some property that could be added to portal-ext.properties or something of the sort.
Thanks in advance!
I would say no. As far as I know TLS v1.2 has been added to Java 7 since 1.7.0_131. Java 6 does not have support for it.
If you are concerned about security consider upgrading Liferay to a newer version.
While I really, really would recommend to upgrade your system, 6.1.2 is pretty ancient, the easiest solution is probably to add a reverse proxy to your setup. You can terminate the ssl connection at the reverse proxy and won't have to worry about what Tomcat and Java support. I also find it more convenient to configure ssl and manage certificates on reverse proxy level since the restart is fast and services like letsencrypt can be used easily.