0006052: Disable TLS version 1.0/TLS version 1.1 in resin server

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006052

[Resin]

major

always

04-25-17 05:26

04-25-17 13:43

Reporter

VasumathiN

View Status

public

Assigned To

Priority

normal

Resolution

no change required

Platform

Status

closed

Projection

none

OS Version

ETA

none

Fixed in Version

Product Version

4.0.49

Product Build

Summary

0006052: Disable TLS version 1.0/TLS version 1.1 in resin server

Description

How to disable TLS version 1.0/TLS version 1.1 in resin server4.0.49

Currently we are using given jsse_cipher_suites in resin.properties
jsse_cipher_suites : TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

Steps To Reproduce

Additional Information

Attached Files

Relationships

Notes
(0006750) stbu 04-25-17 12:14	It's me again (I'm not a Caucho employee, but a 14+ Years Resin user) from bug 0006051 If you really want to exclude TLS 1.0 and 1.1 just use "TLSv1.2" in the <protocol> in your <jsse-ssl> configuration in resin.xml like this: <jsse-ssl> <key-store-file>XXX</key-store-file> <password>XXX</password> <protocol>TLSv1.2</protocol> ...

Issue History
Date Modified	Username	Field	Change
04-25-17 05:26	VasumathiN	New Issue
04-25-17 12:14	stbu	Note Added: 0006750
04-25-17 13:43	ferg	Status	new => closed
04-25-17 13:43	ferg	Resolution	open => no change required

Mantis 1.0.0rc3[^]

31 total queries executed.
28 unique queries executed.