Mantis - Resin
Viewing Issue Advanced Details
6052 major always 04-25-17 05:26 04-25-17 13:43
VasumathiN  
 
normal  
closed 4.0.49  
no change required  
none    
none  
0006052: Disable TLS version 1.0/TLS version 1.1 in resin server
How to disable TLS version 1.0/TLS version 1.1 in resin server4.0.49

Currently we are using given jsse_cipher_suites in resin.properties
jsse_cipher_suites : TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

Notes
(0006750)
stbu   
04-25-17 12:14   
It's me again (I'm not a Caucho employee, but a 14+ Years Resin user) from bug 0006051

If you really want to exclude TLS 1.0 and 1.1 just use "TLSv1.2" in the <protocol> in your <jsse-ssl> configuration in resin.xml like this:

        <jsse-ssl>
          <key-store-file>XXX</key-store-file>
          <password>XXX</password>
          <protocol>TLSv1.2</protocol>
          ...