[NMS-10256] Change Jetty default settings to eliminate TLS 1.0 and TLS 1.1 support - The OpenNMS Issue Tracker

XML

Word

Printable

Details

Type: Configuration
Status: Resolved (View Workflow)
Priority: Minor
Resolution: Fixed
Affects Version/s: Meridian-2018.1.26, Meridian-2019.1.17, Meridian-2020.1.6, 27.1.0
Fix Version/s: Meridian-2018.1.27, Meridian-2019.1.18, Meridian-2020.1.7, 27.1.1
Component/s: Web UI - General
Security Level: Default (Default Security Scheme)
Labels:
- security

Description

Please update default jetty configuration to not allow TLS 1.0:

jetty.xml

<Set name="excludeProtocols">
  <Array type="java.lang.String">
    <Item>TLSv1</Item>
  </Array>
</Set>

Attachments

Activity

People

Assignee:: Jeff Gehlbach

Reporter:: David Hustace

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 10/Jul/18 6:10 PM

Updated:: 01/Apr/21 5:36 PM

Resolved:: 01/Apr/21 5:16 PM

Git Integration