20260717170047

code/fms/fms-api/config/dbconfigs/README.md

@@ -14,3 +14,14 @@ driver=com.microsoft.sqlserver.jdbc.SQLServerDriver
 ```
 
 The `*.properties` files in this directory are ignored by Git.
+
+## Development startup for legacy SQL Server
+
+Run the following command from the `fms-api` directory when connecting to a
+legacy SQL Server that only supports TLS 1.0:
+
+```batch
+set JAVA_HOME=D:\devtool\jdk\jdk-21
+set PATH=%JAVA_HOME%\bin;%PATH%
+mvn "-Dspring-boot.run.jvmArguments=-Djava.security.properties=./config/legacy-tls.security" spring-boot:run
+```

code/fms/fms-api/config/legacy-tls.security

@@ -0,0 +1,3 @@
+# Development-only compatibility for SQL Server 2008 R2.
+# Keep this override scoped to the fms-api JVM.
+jdk.tls.disabledAlgorithms=SSLv3, TLSv1.1, DTLSv1.0, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, ECDH