Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

554 Access denied: Amazon SES no longer supports TLS 1.0 and TLS 1.1 connections. You must update your client to use TLS version 1.2 or above

0

Our java application is encountering this error. Not sure in which layer this has to be fixed. SSL termination happens only at the LB or webserver layer, not at the application layer. Java 11 is used inside tomcat 9.0.65. Not sure openssl version matters. It's a priority issue. Please help.

Topics
Java Development
Tags
Transport Layer Security (TLS)Java Development
Language
English

asked 3 years ago2.4K views

1 Answer
0

Hi,

Yes, upgrade to TLS 1.2 is now enforced: see https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/

So, you must upgrade your LB and/or webserver so that they work at this newer version of TLS. You application code should remain unchanged.

I don't know all details of your Tomcat config, but usually you enforce TLS v1.2 with -Dhttps.protocols=TLSv1.2 as a config parameter of your setenv.sh script

Best,

Didier

EXPERT

answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content