Mantis - Resin
Viewing Issue Advanced Details
6030 major N/A 12-19-16 23:56 02-01-17 13:16
gautham033  
ferg  
normal  
closed 4.0.49  
no change required  
none    
none  
0006030: RC4 vulnerability fix
We have upgraded to Resin 4.0.49. Our doubt is whether RC4 vulnerability is automatically fixed in this version of resin (or) any particular tags needs to be added in resin.xml and resin.properties files?

Notes
(0006737)
ferg   
02-01-17 13:16   
Use <cipher-suites-forbidden>RC4</cipher-suites-forbidden> in the <jsse-ssl> configuration.

<jsse-ssl>
  <cipher-suites-forbidden>RC4</cipher-suites-forbidden>
</jsse-ssl>