archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-09-20 11:04:34 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8211883: Disable anon and NULL cipher suites

Browse source 
Reviewed-by: jnimeh
This commit is contained in:
Sean Mullan 2018-10-25 13:55:28 -04:00
parent fb3ab945a6
commit 7727e4ca2f
4 changed files with 57 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/java.base/share/conf/security/java.security
View file

@ -676,7 +676,7 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
# Example:
# jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, 3DES_EDE_CBC
EC keySize < 224, 3DES_EDE_CBC, anon, NULL
#
# Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS)