FIM - FIPS 140-2 compliance. TLS1 ciphers
2 years ago
Originally Published: 2007-11-02
Article Number
000047551
Applies To
Federated Identity Management Module 2.5
Win 2000 Server SP4
BEA Weblogic 8.1 SP5
Issue
FIM - Questions regarding security - FIPS 140-2 compliance. TLS1 ciphers
Undergoing credential assessment profile verifying use of  SSL3.1 and TLS 1.0 ciphers
Cause
FIM 2.5 uses WLS SP 5 which has the SSL 3.0 implementation not 3.1. It does support TLS1.0 ciphers
Resolution
Disable use of SSL3.0 and use TLS1.0 ciphers only. Add the following to the setserverenv.cmd ( or sh ) file.  "set WL_OPTIONS=%WL_OPTIONS% -Dweblogic.security.SSL.protocolVersion=TLS1"
Notes
FIPS 140-2 is supported in later versions of Weblogic 9.x with a command line switch "-Dweblogic.security.SSL.nojce=true" to use a FIPS-compliant (FIPS 140-2) crypto module in the server's SSL implementation