What is the TLS version in this code snippet of Java 1.7?

Question

I am passing JVM parameter as -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2. But in code ,I am explicitly getting the SSL context object as SSLContext sc = null; sc = SSLContext.getInstance("TLS");.

Will the TLS version be highest version (1.2) in this case, or i need to explicitly get the TLS version as

sc = SSLContext.getInstance("TLSv1.2");

to support TLS version 1.2

Thilo · Accepted Answer · 2015-10-26 06:20:14Z

1

Probably not.

According to the documentation, this setting is only used by HttpsURLConnection and URl#openStream.

https.protocols

Controls the protocol version used by Java clients which obtain https connections through use of the HttpsURLConnection class or via URL.openStream() operations.

If you directly obtain your own SSLContext, the setting is likely not consulted.

answered Oct 26, 2015 at 6:20

Thilo

264k107 gold badges527 silver badges674 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Thilo Over a year ago

For Java8, there is a new setting that seems more comprehensive: stackoverflow.com/questions/11504173/sslcontext-initialization jdk.tls.client.protocols

TruckDriver Over a year ago

Is there a way to capture the outbound traffic like using wireshark etc and determine the TLS version at runtime?

Thilo Over a year ago

... or a public web service that accepts and dumps HTTPS requests.

Shailendra Singh Over a year ago

On Wireshark TLS version can be seen asTLSv1 or TLSv1.1...depending on the case. You need to configure protocols in wireshark menu and enter the port on which TLS communication has to be captured.

Collectives™ on Stack Overflow

What is the TLS version in this code snippet of Java 1.7?

1 Answer 1

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related