Skip to content

Commit 12a6de0

Browse files
authored
Merge pull request #100242 from sspeaks610/master
Changed wording for TLS 1.2 for java clients
2 parents a24cf94 + 4523403 commit 12a6de0

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

articles/azure-cache-for-redis/cache-remove-tls-10-11.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,15 +47,15 @@ Redis .NET Core clients use the latest TLS version by default.
4747

4848
### Java
4949

50-
Redis Java clients use TLS 1.0 on Java version 6 or earlier. Jedis, Lettuce, and Radisson can't connect to Azure Cache for Redis if TLS 1.0 is disabled on the cache. There's currently no known workaround.
50+
Redis Java clients use TLS 1.0 on Java version 6 or earlier. Jedis, Lettuce, and Redisson can't connect to Azure Cache for Redis if TLS 1.0 is disabled on the cache. Upgrade your Java framework to use new TLS versions.
5151

52-
On Java 7 or later, Redis clients don't use TLS 1.2 by default but can be configured for it. Lettuce and Radisson don't support this configuration right now. They'll break if the cache accepts only TLS 1.2 connections. Jedis allows you to specify the underlying TLS settings with the following code snippet:
52+
For Java 7, Redis clients don't use TLS 1.2 by default but can be configured for it. Jedis allows you to specify the underlying TLS settings with the following code snippet:
5353

5454
``` Java
5555
SSLSocketFactory sslSocketFactory = (SSLSocketFactory) SSLSocketFactory.getDefault();
5656
SSLParameters sslParameters = new SSLParameters();
5757
sslParameters.setEndpointIdentificationAlgorithm("HTTPS");
58-
sslParameters.setProtocols(new String[]{"TLSv1", "TLSv1.1", "TLSv1.2"});
58+
sslParameters.setProtocols(new String[]{"TLSv1.2"});
5959

6060
URI uri = URI.create("rediss://host:port");
6161
JedisShardInfo shardInfo = new JedisShardInfo(uri, sslSocketFactory, sslParameters, null);
@@ -65,6 +65,10 @@ shardInfo.setPassword("cachePassword");
6565
Jedis jedis = new Jedis(shardInfo);
6666
```
6767

68+
The Lettuce and Redisson clients don't yet support specifying the TLS version, so they'll break if the cache accepts only TLS 1.2 connections. Fixes for these clients are being reviewed, so check with those packages for an updated version with this support.
69+
70+
In Java 8, TLS 1.2 is used by default and shouldn't require updates to your client configuration in most cases. To be safe, test your application.
71+
6872
### Node.js
6973

7074
Node Redis and IORedis use TLS 1.2 by default.

0 commit comments

Comments
 (0)