RE: Can TLS 1.2 be enabled on Liferay 6.1.2. CE GA3 ?

Jose Giron, modified 4 Years ago. New Member Posts: 2 Join Date: 4/13/21 Recent Posts

Hi! after searching the web for a while, i'm still doubtful about this.

From what i understand, Liferay 6.1.2 has Java 6 embedded, which does not support TLSv1.2, and since upgrading to Java 7 is not an option right now (at least not in short term), i was wondering if there's some property that could be added to portal-ext.properties or something of the sort.

Thanks in advance!

thumbnail
Dominik Marks, modified 4 Years ago. Regular Member Posts: 149 Join Date: 8/29/12 Recent Posts

I would say no. As far as I know TLS v1.2 has been added to Java 7 since 1.7.0_131. Java 6 does not have support for it.

If you are concerned about security consider upgrading Liferay to a newer version.

thumbnail
Christoph Rabel, modified 4 Years ago. Liferay Legend Posts: 1555 Join Date: 9/24/09 Recent Posts

While I really, really would recommend to upgrade your system, 6.1.2 is pretty ancient, the easiest solution is probably to add a reverse proxy to your setup. You can terminate the ssl connection at the reverse proxy and won't have to worry about what Tomcat and Java support. I also find it more convenient to configure ssl and manage certificates on reverse proxy level since the restart is fast and services like letsencrypt can be used easily.