FedEx Requires TLSv1.2 for Secure Communication

Scenario:
FedEx has enforced a policy where only TLSv1.2 connections are accepted for secure communication.
This causes ShipConsole communication with FedEx to fail if an unsupported TLS version is used.

Problem:

FedEx Requires TLSv1.2 for Secure Communication, whenever version is upgraded, we must change it 

Solution:

To support TLSv1.2, modify the AASCTOMCATRESTART.sh script by adding the required TLS protocols to JAVA_OPTS. 

##########################################################################################################################

# This Script is used for restarting the tomcat server.

# Parameters used to run the program

# 1 Java Home

# 2 Tomcat Home

#

# Created by Date

# Suresh Kumar G 29 APRIL 2010 Update version

##########################################################################################################################

Modified AASCTOMCATRESTART.sh Script 

echo "Tomcat Restart Program.. Processing"

JAVA_HOME=$1; export JAVA_HOME

export CATALINA_HOME=$2

# Shutdown Tomcat

sh $2/bin/shutdown.sh

sleep 5

# Set memory and library path

export CATALINA_OPTS="-Xms1024m -Xmx1024m -Djava.library.path=/usr/local/apr/lib"

# Add TLS protocols for secure communication

export JAVA_OPTS="-Dhttps.protocols=TLSv1.1,TLSv1.2"

# Startup Tomcat

sh $2/bin/startup.sh

exit 0

 Steps to Apply:

1. SSH into the application server.

2. Open AASCTOMCATRESTART.sh in a text editor (e.g., vi, nano).

3. Add the line:

   export JAVA_OPTS="-Dhttps.protocols=TLSv1.1,TLSv1.2"
   

4. Save and close the file.

5. Run the script to bounce Tomcat

   sh AASCTOMCATRESTART.sh <JAVA_HOME_PATH> <TOMCAT_HOME_PATH>