TLSv1.0 and TLSv1.1 Are Disabled by Default in April 2021 Critical Patch Update (Doc ID 2768216.1)

Last updated on APRIL 13, 2023

Applies to:

Purpose

This article covers the "Disabling of TLS protocol 1.0/1.1" which is part of the April 2021 Critical Patch Update (CPU).  TLS stands for Transport Layer Security.  TLS evolved from the Secure Socket Layer (SSL) protocol and is specified by the Internet Engineering Task Force (IETF) Standards body.  The intent of these protocols is to provide confidentiality, authenticity, and message integrity for communications between client and server applications over the web.

Scope

This article is intended as a supplement to the existing Java SE documentation regarding the Oracle JRE and JDK Cryptographic Roadmap.   It explains the implementation of an announced change for the support of two TLS protocol versions.  For customers who still need to use these weaker versions of the TLS protocol, a workaround is described.

Details

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.