|
Mantis - Resin
|
|||||
| Viewing Issue Advanced Details | |||||
|
|
|||||
| ID: | Category: | Severity: | Reproducibility: | Date Submitted: | Last Update: |
| 2792 | minor | always | 07-16-08 11:44 | 07-28-08 19:22 | |
|
|
|||||
| Reporter: | ferg | Platform: | |||
| Assigned To: | ferg | OS: | |||
| Priority: | urgent | OS Version: | |||
| Status: | closed | Product Version: | 3.1.6 | ||
| Product Build: | Resolution: | fixed | |||
| Projection: | none | ||||
| ETA: | none | Fixed in Version: | 3.2.0 | ||
|
|
|||||
| Summary: | 0002792: jsse ssl protocols | ||||
| Description: |
(rep by Maithili Deshpande) We are on windows XP and are working on upgrading to jdk 1.6 and resin 3.1.6. We are using jsse-ssl. As part of this upgrade we would like to disable SSLv2 and use SSLv3. From going thru' the documentation on the caucho site, it looks like the default is that all the protocols (sslv2, sslv3, TLsv1) are enabled. I'm not finding any clear documentation/syntax on how to turn off SSLv2. I found something that says > to enable all except SSLv2, use: SSLProtocol all -SSLv2 and sslv2 Enables or disables SSL v2 for a SSL port. If sslv2 is false, clients trying to use SSL v2 will fail. Default: true. But how do I configure this in my resin.conf file? Our resin.conf file is attached. Any help would be appreciated. |
||||
| Steps To Reproduce: | |||||
| Additional Information: | |||||
| Relationships | |||||
| Attached Files: | |||||
| Notes | |||||
|
|
|||||
|
|
||||