How can we block TLS 1.0, 1.1 traffic to a REST service running in BW 5.14

[Dahai Zang]

We have a REST service that internal intranet clients use. We would like to block TLS 1.0 and TLS 1.1 and only allow TLS 1.2.

The REST service application tra file has the following appended:

java.property.TIBCO_SECURITY_VENDOR=j2se

java.property.https.protocols=TLSv1.2

java.property.com.tibco.security.ssl.server.EnableTLSv1=false

java.property.com.tibco.security.ssl.client.EnableTLSv1=false

java.property.com.tibco.security.ssl.server.EnableTLSv11=false

java.property.com.tibco.security.ssl.client.EnableTLSv11=false

java.property.com.tibco.security.ssl.server.EnableTLSv12=true

java.property.com.tibco.security.ssl.client.EnableTLSv12=true

However, when making a TLS 1.0 call from a client tool like SOAP-UI, the connection is made and data is returned - the handshake is never blocked.

Is this a BW bug We are at the latest version - 5.14