RE: disable weak and medium cihpers [Preconfiguration Help Requested]

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

From: <bamoss_at_sceats.com>
Date: Thu, 03 Dec 2009 12:53:11 -0700

On a related note, I am interested in preconfiguring Glassfish to disable weak cipher suites.

I have done some other preconfiguration, by customizing the domain.xml.template and domain.xml.xls files, so that when Glassfish is built with the ant script, the http-listeners are set up how I want them. This minimizes configuration steps for our customers. However, I am having problems defining my cipher suites.

Could anyone explain how to preconfigure Glassfish template files to specify only desired cipher suites?

Thanks in advance!

Derek

-------- Original Message --------
Subject: disable weak and medium cihpers
From: glassfish@javadesktop.org
Date: Thu, December 03, 2009 10:30 am
To: users@glassfish.dev.java.net

Based on my previous experience like usually it relates to the type of the certificate that is being used on the application.
Maybe someone will be able to help me with the following questions:

How to enforce strong ciphers (TLS 1.0 only)?
How to replace self generated certificate? (we need to replace it from being signed by MD5 to SHA )

I saw few options under domain.xml
Ssl3-enabled=”true” if I set to false does it mean that SSL3.0 will be disabled?
Tls-rollback-enabled=”true” what does this option do?

Thanks
[Message sent by forum member 'drumik' ]

http://forums.java.net/jive/thread.jspa?messageID=374594

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@glassfish.dev.java.net
For additional commands, e-mail: users-help@glassfish.dev.java.net