Dell BSAFE™ SSL-J 7.4 Release Advisory

Initially published on December 2, 2025

Announcement

The Dell BSAFE Product Team announces the general availability of Dell BSAFE SSL-J 7.4. This release includes Dell BSAFE Crypto Module for Java 7.1 as its underlying FIPS 140-3 provider, and also supports the use of Crypto-J 7.0.x.

This release includes the following new features:

• BSAFE Crypto-J 7.1 is now supported by BSAFE SSL-J

• Added support for the following JDK properties:

  • jdk.tls.client.disableExtensions

  • jdk.tls.server.disableExtensions

  • jdk.tls.client.enableCAExtension

   

The following is a changed feature:

• Oracle J2EE default DH parameter key sizes of 512, 768, and 1024-bits are no longer supported.

The following issues have been resolved:

• Fix for a High security vulnerability. See DSA-2025-432: Security Update for Dell BSAFE™ SSL-J Vulnerability for more details
• SSL-J configured as a TLS client enabling both TLS v1.2 and 1.3 defaulted to send a TLS v1.3 ClientHello message, causing interop issues with remote TLS servers supporting only TLS v1.2. 

For additional documentation, downloads, and more, see How To Request a Dell BSAFE product download.