Does SAP IQ 16.1 Support TLS 1,2 , how can we restrict server to accept only TLS 1.2

[shery_vijayan]

Does SAP IQ 16.1 Support TLS 1,2 , how can we restrict server to accept only TLS 1.2

[philippefbertrand]

IQ 16.1 SP04 PL01 has min_tls_version parameter. You can use min_tls_version=<ver> in the -ec or -xs switches or as part of the ENCRYPTION=tls connection parameter. For example, to allow TLSv1.2 connections over HTTPS, use “-xs https(min_tls_version=1.2;<other parameters>)”. The dot is optional so you can use 10, 11, and 12.
It was introduced early 2019 in all actively supported branches.

[former_member676063]

Any documentation around this? cannot find details for this. Trying to restrict all incoming TLS connections to specific version or above.

[philippefbertrand]

Sorry, it looks like it was missed. I have alerted documentation that the docs need to be updated.

Example: -xs HTTPS(FIPS=N;PORT=82;IDENTITY=ecserver.id;IDENTITY_PASSWORD=test;MIN_TLS_VERSION=1.2)

[shery_vijayan]

Thanks Philippe ..

Will try it out on a test instance ..

The documentation appears to me missing though ..

checked -xs / -ec part of the documentation ..

ill be happy to give a try ..

Thanks,

[Sreejith1]

Hi shery_vijayan,

Whether above solution have worked? When we tried, it was not working.

Regards,

Sreejith

[shery_vijayan]

Thanks Tayeb for the feedback,

We managed to build IQ 16.1 with TLS , Now we need to know ,

Is there any way we can restrict the session to use TLS 1.2 ,

is there any option to insist on 1.2 either from the server side or from the client side ..

How can we confirm the sessions are using TLS 1.2 ...

Any help is highly appreciated ..

Thanks ,

[philippefbertrand]

IQ 16.1 SP04 PL01 has min_tls_version parameter. You can use min_tls_version=<ver> in the -ec or -xs switches or as part of the ENCRYPTION=tls connection parameter. For example, to allow TLSv1.2 connections over HTTPS, use “-xs https(min_tls_version=1.2;<other parameters>)”. The dot is optional so you can use 10, 11, and 12.
It was introduced early 2019 in all actively supported branches.

[tayeb_hadjou]

TLS 1.2 is supported with IQ 16.1:

2518936 - Upgrade questions - SAP IQ 16

2332735 - SQL Anywhere TLS 1.2 support

Setting Up TLS Connections for the Multiplex

SQL Anywere Transport Layer Security