Amazon S3 SDK for java - configure TLSv1.2

Question

I have a basic Amazon S3 SDK code snippet which is used to retrieve a list of buckets. The server is configured to only accept TLSv1.2. I am not able to configure my client to send a TLS v1.2 request, debugging shows that client is always sending a TLSv1. I have tried setting the system property, but that does not work either.

-Dhttps.protocols=TLSv1.2

        BasicAWSCredentials credentials = new BasicAWSCredentials(username,password);

        AmazonS3 s3 = new AmazonS3Client(credentials);
        final String serviceurl = "https://ip:port";
        s3.setEndpoint(serviceurl);
        S3ClientOptions s3ClientOptions = new S3ClientOptions();
        s3ClientOptions.setPathStyleAccess(false);
        s3.setS3ClientOptions(s3ClientOptions);

        for (Bucket bucket: s3.listBuckets()) {
            System.out.println("Bucket name::" + bucket.getName());
        }

What am I missing here? How can I configure the code to always send a TLSv1.2 request? I am using AWS SDK 1.7.25. Thanks for your help.

Answer 1

Version 1.9.4 of the AWS Java SDK made TLSv1.2 the default.

However, it didn't exist in an enum until version 1.9.14 (code here). I'd suggest using that version as a minimum.

I believe it's possible to inject this information, but it's a lot of work. I'm probably missing a little bit here:

import org.apache.http.conn.ssl.SSLSocketFactory;
import com.amazonaws.ApacheHttpClientConfig;
import com.amazonaws.ClientConfiguration;

SSLContext ctx = SSLContext.getInstance("TLSv1.2");
SSLSocketFactory socketFactory = ctx.engineGetSocketFactory();

ClientConfiguration client = new ClientConfiguration();
ApacheHttpClientConfig apacheClient = client.getApacheHttpClientConfig();
SSLSocketFactory socketContext = apacheClient.getSslSocketFactory();
apacheClient.setSslSocketFactory(socketFactory);

Sources for the injections:

• http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html
• http://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/ApacheHttpClientConfig.html
• http://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/ClientConfiguration.html