Enabling TLS-Only on WebLogic

The weblogic.security.SSL.protocolVersion command-line argument lets you specify which protocol is used for SSL connections.

To enable TLS-only on WebLogic Server:

1. Open <PIA_HOME>/webserv/<domain_name>/bin/setEnv.cmd (Windows) or setEnv.sh (UNIX) in edit mode.

2. Append the following option to the JAVA_OPTIONS variable:

   -Dweblogic.security.SSL.protocolVersion=TLS1

   For example, on Windows in the setEnv.cmd, the updated JAVA_OPTIONS_WIN would appear as:

   SET JAVA_OPTIONS_WIN=-jrockit -XnoOpt -XXnoJITInline -Xms512m -Xmx512m
   -Dtoplink.xml.platform=oracle.toplink.platform.xml.jaxp.JAXPPlatform
   -Dweblogic.security.SSL.protocolVersion=TLS1

3. Save the change.

4. Restart PeopleSoft Internet Architecture.

For more information about Supporting TLS1 protocol, refer to the Oracle WebLogic documentation for specifying the version of SSL to be used.

See Specifying the SSL Protocol Version..

It is strongly recommended that you access the vendor's documentation of the web server you are using for a reverse proxy server and use their instructions for setting up TLS.