Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-7294

Update JavaMail library from 1.4 to 1.6 in order to support TLS 1.2

    XMLWordPrintable

Details

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      Problem Definition

      The old JavaMail 1.4 jar must use TLS 1.0 or 1.1, as can be seen here.

      The problem is that most companies have disabled TLS 1.0 and 1.1 for well known security problems.

      Adding -Dmail.smtp.ssl.protocols=TLS1.2 to FISHEYE_OPTS environment variable does not help because emails stop being sent by Fisheye.

      Suggested Solution

      Update JavaMail library to at least 1.6 because this version already supports TLS 1.2

      Workaround

      1. Download JavaMail 1.6.2
      2. Stop Fisheye
      3. Move <Fisheye Installation Directory>/lib/mail-1.4.jar to somewhere outside of Fisheye, as a backup
      4. Place JavaMail 1.6 at <Fisheye Installation Directory>/lib
      5. Start Fisheye

      Attachments

        Issue Links

          Activity

            People

              mparfianowicz Marek Parfianowicz
              fkraemer Felipe Kraemer
              Votes:
              6 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: