R365 – Calling out to a HTTP service using an older (deprecated) SSLProtocol (WMB)

Calling out to a HTTP service using an older (deprecated) SSLProtocol (WMB)

Weaknesses in older protocols for providing encryption have been found over time. User the latest encryption where possible.

For example – instead of this

SET OutputLocalEnvironment.Destination.HTTP.SSLProtocol = ‘SSL’;
Preferred SET OutputLocalEnvironment.Destination.HTTP.SSLProtocol = ‘TLS’;

For the SSLProtocol the options are:

  • SSL
  • SSLv3
  • TLS
  • TLSv1
  • TLSv1.2
  • SSL_TLS
  • SSL_TLSv2

    • There is an IBM article here on the use of TLS vs SSL.