TLS v1.2 encryption for new JasperReports Server installations
If you want to install JasperReports Server from scratch and configure TLS v1.2 encryption on it, you have to perform an extra step compared to the standard installation procedure.
More specifically, you have to configure the following files before you run the /js-install.bat minimal command. You can find them in the buildomatic folder of your JasperReports Server installation:
- default_master.properties: follow the instructions in the standard procedure when configuring this file. Make sure that you have defined the correct host, port, and service name for your secured connection.
- conf_source\db\oracle\db.template.properties: modify lines 10-13 and specify the additional Oracle Wallet settings as in the following example:
In this case:admin.jdbcUrl=jdbc:tibcosoftware:oracle://<dbHost>:<dbPort>;<SID-or-service-name><additional-Admin-properties>;EncryptionMethod=SSL;TrustStore=<path-to-certificate>\/cwallet.sso;TrustStoreType=SSO;CryptoProtocolVersion=TLSv1.2; js.jdbcUrl=jdbc:tibcosoftware:oracle://<dbHost>:<dbPort>;<SID-or-service-name><additional-Admin-properties>;EncryptionMethod=SSL;TrustStore=<path-to-certificate>\/cwallet.sso;TrustStoreType=SSO;CryptoProtocolVersion=TLSv1.2; sugarcrm.jdbcUrl=jdbc:tibcosoftware:oracle://<dbHost>:<dbPort>;CatalogOptions=0;<SID-or-service-name>;EncryptionMethod=SSL;TrustStore=<path-to-certificate>\/cwallet.sso;TrustStoreType=SSO;CryptoProtocolVersion=TLSv1.2; foodmart.jdbcUrl=jdbc:tibcosoftware:oracle://<dbHost>:<dbPort>;CatalogOptions=0;<SID-or-service-name>;EncryptionMethod=SSL;TrustStore=<path-to-certificate>\/cwallet.sso;TrustStoreType=SSO;CryptoProtocolVersion=TLSv1.2;- <dbHost> is the fully qualified domain name of your database server
- <dbPort> is the port on which your database server is running
- <SID-or-service-name> is the SID or the service name of your Oracle database
- <path-to-certificate> is the path to your TrustStore certificate; for example, C:\/WorldServer\/Oracle_Certificate