554 Access denied: Amazon SES no longer supports TLS 1.0 and TLS 1.1 connections. You must update your client to use TLS version 1.2 or above

Question

Our java application is encountering this error. Not sure in which layer this has to be fixed. SSL termination happens only at the LB or webserver layer, not at the application layer. Java 11 is used inside tomcat 9.0.65. Not sure openssl version matters. It's a priority issue. Please help.

Answer

Hi,

Yes, upgrade to TLS 1.2 is now enforced: see https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/

So, you must upgrade your LB and/or webserver so that they work at this newer version of TLS. You application code should remain unchanged.

I don't know all details of your Tomcat config, but usually you enforce TLS v1.2 with `-Dhttps.protocols=TLSv1.2` as a config parameter of your setenv.sh script

Best,

Didier

554 Access denied: Amazon SES no longer supports TLS 1.0 and TLS 1.1 connections. You must update your client to use TLS version 1.2 or above

Relevant content