Purpose

Specifies a cryptographic protocol or comma-separated list of cryptographic protocols that can be used when SSL is enabled.

Valid Values

cryptographic_protocol [[,cryptographic_protocol]...]

where:

cryptographic_protocol

is one of the following cryptographic protocols:

TLSv1.3 | TLSv1.2|TLSv1.1|TLSv1|SSLv3|SSLv2`

Note: The protocols available depend on your Java version. Most modern implementations have disabled all but TLSv1.2 and TLSv1.3.

Caution: To avoid vulnerabilities associated with older protocols, best security practices recommend using TLSv1.2 or higher.

Example

If your server supports TLSv1.2 and TLSv1.3, you can specify acceptable cryptographic protocols with the following key-value pair:

CryptoProtocolVersion=TLSv1.2,TLSv1.3

Notes

  • When multiple protocols are specified, the driver uses the highest version supported by the server. If none of the specified protocols are supported by the server, the connection fails and the driver returns an error.

  • The default may be set in the Java system property https.protocols, which is often set on the Java command line with the -Dproperty= option. For example: -Dhttps.protocols=TLSv1.2,TLSv1.3

Data Source Methods

public String getCryptoProtocolVersion()

public void setCryptoProtocolVersion(String)

Default Value

No default value

Data Type

String