0006030: RC4 vulnerability fix

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006030

[Resin]

major

N/A

12-19-16 23:56

02-01-17 13:16

Reporter

gautham033

View Status

public

Assigned To

ferg

Priority

normal

Resolution

no change required

Status

closed

Product Version

4.0.49

Summary

0006030: RC4 vulnerability fix

Description

We have upgraded to Resin 4.0.49. Our doubt is whether RC4 vulnerability is automatically fixed in this version of resin (or) any particular tags needs to be added in resin.xml and resin.properties files?

Additional Information

Attached Files

Relationships

Notes
(0006737) ferg 02-01-17 13:16	Use <cipher-suites-forbidden>RC4</cipher-suites-forbidden> in the <jsse-ssl> configuration. <jsse-ssl> <cipher-suites-forbidden>RC4</cipher-suites-forbidden> </jsse-ssl>

Issue History
Date Modified	Username	Field	Change
12-19-16 23:56	gautham033	New Issue
02-01-17 13:16	ferg	Note Added: 0006737
02-01-17 13:16	ferg	Assigned To	=> ferg
02-01-17 13:16	ferg	Status	new => closed
02-01-17 13:16	ferg	Resolution	open => no change required

Mantis 1.0.0rc3[^]

29 total queries executed.
26 unique queries executed.