Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-7294

Update JavaMail library from 1.4 to 1.6 in order to support TLS 1.2

XMLWordPrintable

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem Definition

      The old JavaMail 1.4 jar must use TLS 1.0 or 1.1, as can be seen here.

      The problem is that most companies have disabled TLS 1.0 and 1.1 for well known security problems.

      Adding -Dmail.smtp.ssl.protocols=TLS1.2 to FISHEYE_OPTS environment variable does not help because emails stop being sent by Fisheye.

      Suggested Solution

      Update JavaMail library to at least 1.6 because this version already supports TLS 1.2

      Workaround

      1. Download JavaMail 1.6.2
      2. Stop Fisheye
      3. Move <Fisheye Installation Directory>/lib/mail-1.4.jar to somewhere outside of Fisheye, as a backup
      4. Place JavaMail 1.6 at <Fisheye Installation Directory>/lib
      5. Start Fisheye

            mparfianowicz Marek Parfianowicz
            fkraemer Felipe Kraemer
            Votes:
            6 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: