javasslhttprequesttls1.2sslcontext

How do I make sure that the client is using (or able to use) TLS v1.2 while visiting some pages of an application?


I am working on a credit card support module on a Java-based Web application, for security, we want to have the users use TLS v1.2 supported browsers while viewing the credit card pages How do I make sure they are compatible? Note: We don't want to restrict users to other pages if they are not compatible.


Solution

  • This is an old question. Here's some information

    How do I detect the TLS version of an HttpServletRequest?

    Can I detect the SSL version that a browser supports?

    https://gist.github.com/SamuelChristie/13a2a29e74c189bcfd9b - Gracefully Deprecating TLS 1.0