Diffie-Hellman key encryption and TLS JDBC compatibility (Doc ID 2288489.1)

Last updated on JULY 30, 2017

Applies to:

JDBC - Version 12.1.0.2.0 and later
Information in this document applies to any platform.

Symptoms

Using JDBC 12.1.0.2, JDK 1.7, TLS, and Diffie-Hellman faces following error:


Caused by: java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:235)
  at sun.security.ssl.CipherSuiteList.(CipherSuiteList.java:82)
  at sun.security.ssl.SSLSocketImpl.setEnabledCipherSuites(SSLSocketImpl.java:2374)
  at oracle.net.nt.TcpsConfigure.configureCipherSuites(TcpsConfigure.java:319)
  ... 18 more

Switching to another cipher suite SSL_DH_anon_WITH_3DES_EDE_CBC_SHA works.

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms