IBM Support

How to enable SHA1 from an 7.5.4 Studio

How To


Summary

To help with the migration, L3 is allowing L2 to modify the Java™ security package to enable SHA1.

Removing SHA1 is a workaround, not a solution.

Customer needs to continue moving to certificates on their App Connect Professional appliance and their endpoints that use SSL.

Customer will have to do this update manually with L2 Assistance after any upgrade interim fix.

Steps

With Studio not running

On windows file manager navigate to the studio install dir.

for example: C:\Program Files\IBM\App Connect Studio 754 Base\security

copy java.security.override so you have a backup
 
edit with notepad or another test editor java.security.override

Change the following line
jdk.tls.disabledAlgorithms=SSLv3, TLSv1, RC4, DES, MD5withRSA, DH keySize < 1024, DESede, \
    EC keySize < 224, 3DES_EDE_CBC, anon, NULL, SHA1, CBC

to

jdk.tls.disabledAlgorithms=SSLv3, TLSv1, RC4, DES, MD5withRSA, DH keySize < 1024, DESede, \
    EC keySize < 224, 3DES_EDE_CBC, anon, NULL

save and exit 

now you can start studio.

Document Location

Worldwide

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS3LC4","label":"App Connect Professional"},"ARM Category":[{"code":"a8m50000000Ckk3AAC","label":"ACP->Studio"}],"ARM Case Number":"TS004458732","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.4"}]

Document Information

Modified date:
06 November 2020

UID

ibm16360839