TLS version used in JDK 8

0
votes

We initialise our SSL context with the following code and are running on Java 8.

SSLContext context = SSLContext.getInstance("SSL");

Since Java 8 uses TLSv1.2 by default? Does it mean the above code will start sending TLSv1.2 requests if my server supports it.

Want to understand if "SSL" protocol name is just an alias but java runtime starts sending the requests with default TLS version.

UPDATE

I ran my code against "https://www.google.co.in/" and found this in fiddler

A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.

Version: 3.3 (TLS/1.2

And also if i change my protocol to TLSv1 which only supports 1.0. Then Fiddler tells me

A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.

Version: 3.1 (TLS/1.0)

So, I guess the above code with "SSL" protocol name should work well with TLS 1.2 servers.

1
javatls1.2

1 Answers

0
votes

Yes. In Java 7, server side default TLS version was 1.2. In Java 8 both server and client have default TLS version 1.2.

As TLS version is backward compatible on both side unless server is configured strictly to specific version should not be an issue.