Error message "The server selected protocol version TLS10 is not accepted by client preferences"

Question

I am trying to run this JNLP file on Windows 10 to connect to a server (actually, I am connecting to a dedicated server via KVM over IPMI (IPKVM) or whatever it is called, so I can install a new operating system).

I am getting error

The server selected protocol version TLS10 is not accepted by client preferences.

Is there something I need to do in Java client to fix the error?

Unrelenting tls10 objections in my case. So I grabbed jre7 which worked making sure its bin directory had priority. Was necessary to create an Oracle account to access the [archives](https://www.oracle.com/java/technologies/javase/javase7-archive-downloads.html) — bvj, Feb 13 '23 at 00:23

score 79 · Answer 1 · edited Aug 21 '22 at 21:32

79

Go to folder C:\Program Files (x86)\Java\jre1.8.0_291\lib\security.

In file java.security, find option jdk.tls.disabledAlgorithms and delete TLSv1.

edited Aug 21 '22 at 21:32

Peter Mortensen

30,738
21
105
131

answered Jun 27 '21 at 09:43

Denis Danilov

899
4
2

7

For Linux environment the file is in /usr/lib/jvm/java-11-openjdk-amd64/conf/security/java.security – Eytan Naim Dec 09 '21 at 12:39
2

For Java **64 bits** the PATH is "C:\Program Files\Java\jre...\lib\secutiry\java.security" – circulosmeos Jan 18 '22 at 10:05
@EytanNaim It's not only for Linux enviroment but for java-11 plus version! – G. Ciardini Nov 17 '22 at 17:20
3

Probably better @EytanNaim to do `locate conf/security/java.security` -- you might not be on that version of java. – Auspex Dec 20 '22 at 17:22
It's worth noting that one shouldn't be randomly disabling security features: TLSv1 and all the other items in `jdk.tls.disabledAlgorithms` are disabled because they're insecure. In my case, it's a very old SQL Server db that will, I hope, be replaced next month. – Auspex Dec 20 '22 at 17:28
Can't edit it due to non-administrative rights – Moeez Feb 09 '23 at 06:34

score 17 · Answer 2 · edited Aug 21 '22 at 21:20

17

It appears that the latest update of Java 11 has disabled TLS 1.0 and TLS 1.1.

Here is the detailed documentation on how to enable it again: TLS 1.0/1.1 changes in OpenJDK and Amazon Corretto

Apparently, I was caught in this issue because of a JDK update today and had hard time finding it. This can help.

edited Aug 21 '22 at 21:20

Peter Mortensen

30,738
21
105
131

answered Apr 28 '21 at 12:33

Anand Vaidya

1,374
11
26

score 8 · Answer 3 · edited Feb 18 '23 at 15:36

8

The first thing to do: Go to folder C:\Program Files\Java\jre1.8.0_291\lib\security. In the java.security file, find option jdk.tls.disabledAlgorithms and delete TLSv1.

If it still doesn't work, make sure that the line:

deployment.security.TLSv1=true

exists in file C:\Users\JavaUser\AppData\LocalLow\Sun\Java\Deployment\deployment.properties.

edited Feb 18 '23 at 15:36

double-beep

5,031
17
33
41

answered Apr 26 '22 at 08:19

Vitaly

81
1
3

1

On [Windows](https://en.wikipedia.org/wiki/Microsoft_Windows), presumably. What version was it tested on? [Windows 10](https://en.wikipedia.org/wiki/Windows_10)? – Peter Mortensen Aug 21 '22 at 21:38
Under Linux you may find "jdk.tls.disabledAlgorithms" under "~/.config/icedtea-web/deployment.properties" and "deployment.security.TLSv1=true" is configured in "/etc/java-*-openjdk/security/java.security" – Oliver R. Oct 28 '22 at 11:44

score 6 · Answer 4 · edited Aug 21 '22 at 21:27

6

Don't update to Java 11. Nowadays TLS 1.0 is outdated. The sites using TLS 1.0 and TLS 1.1 certificates for encryption will be marked as insecure in browsers.

So better to update the Transport Layer Security (TLS) version in SQL Server.

Please follow the pages:

edited Aug 21 '22 at 21:27

Peter Mortensen

30,738
21
105
131

answered Jun 02 '21 at 11:57

Sambasivarao Garidi

61
1

score 4 · Answer 5 · edited Aug 21 '22 at 21:36

4

You can set it in JRE inside SoapUI (if you are using it): Remove "TLSv1, TLSv1.1" from "jdk.tls.disabledAlgorithms" property in file ${soapui_home}/jre/conf/securityjava.security.

edited Aug 21 '22 at 21:36

Peter Mortensen

30,738
21
105
131

answered Feb 09 '22 at 13:01

Petr Flídr

116
5

Removing from jdk.tls.disabledAlgorithms did worked for me. – SushantPatade Apr 19 '22 at 14:55

score 1 · Answer 6 · edited Aug 21 '22 at 21:35

1

Go to Control Panel, Program. Click on Java (Java control Panel), go to Advanced, scroll down and check TLS 1.0 and TLS 1.1.

Close your program and start it again.

edited Aug 21 '22 at 21:35

Peter Mortensen

30,738
21
105
131

answered Oct 20 '21 at 01:12

user17197023

21
1

What platform? [Windows](https://en.wikipedia.org/wiki/Microsoft_Windows)? What version? [Windows 10](https://en.wikipedia.org/wiki/Windows_10)? – Peter Mortensen Aug 21 '22 at 21:32

pero_hero · Answer 7 · 2022-10-12T12:26:47.963

1

I know this is a Windows 10 related question, but just in case somebody is looking for an answer. I found this helpful hint here.

For RedHat based JVMs (e.g. Docker image registry.redhat.io/ubi8/openjdk-11-runtime) you have to remove TLSv1 from the property jdk.tls.disabledAlgorithms in:

/etc/crypto-policies/back-ends/java.config

as modifying the java.security file alone, will not solve the issue.

edited Oct 12 '22 at 12:26

answered Oct 12 '22 at 10:24

pero_hero

2,881
3
10
24

avinash · Answer 8 · 2023-01-23T07:14:35.373

If you are using eclipse first check the path of jre used by eclipse. For knowing the path of JRE used by eclipse you can follow the below steps. (project>properties>java build path> libraries).
click on JRE system library>edit>installed JREs
Now it will display the path of JRE currently used by eclipse.
Go to JRE>conf>security and open java.security file and remove TLSv1 from the property jdk.tls.disabledAlgorithms

user3175453 · Answer 9 · 2023-06-29T17:54:08.490

0

the solution look the video for java 11

The server selected protocol version TLS10 is not accepted by client preferences [TLS13, TLS12]

https://www.youtube.com/watch?v=ynEQM-W8RkU

edited Jun 29 '23 at 17:54

answered Jun 29 '23 at 16:20

user3175453

57
5

score 0 · Answer 10 · answered Jul 28 '23 at 15:13

I had this issue recently, it was because I was trying to connect to an old version of Microsoft SQL Server (2012, ver. 11.00.3156) using the latest versión of the SQL Server JDBC Driver (ver. 12.2.0) with a newer versión JDK (ver. 11.0.15).

It happens because newer versión of JDK by default dissable some old security algorithms like TLSv1.0 (in favor of newer like TLSv1.2/TLSv1.3) which the old SQL Server is requiring as security algorithm.

To solve the issue I changed the JDBC driver to an older version 8.2.2 and I had to pass some java security VM options to the JDK to override some security configs and remove TLSV1.0 from the disabled algorithms

VM options to pass to JDK

-Djdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL

(note that TLSv1.0 and TLSv1.1 are removed from the original JDK list)

Doing that I managed to successfully connect to the old SQL Server 2012. Hope this help you

score -3 · Answer 11 · edited Aug 21 '22 at 21:30

Problem: TLS 1.0 is not supported in Java 1.8 and above. To connect to SQL Server 2014 and below servers, you need to send TLS 1.0 connection.

Solution: if you downgrade your project to Java 1.7 version this problem will be solved. The JDBC driver version you are using should be 4.2.

Solution for Java 1.7 SSL connection issue:

You will get an error when you query websites with SSL certificate in Java 1.7 version. To fix this error; Download the site’s .cer certificate. Next (note we are talking about JRE file here), write “keytool” in the carsets file at %path_java_jre\lib\security. Your connection problem will disappear.

Re *"carsets"*: Do you mean *"charsets"*? – Peter Mortensen Aug 21 '22 at 21:31 — Peter Mortensen, Aug 21 '22 at 21:31

Error message "The server selected protocol version TLS10 is not accepted by client preferences"

11 Answers11

Linked