felix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Felix Meschberger (JIRA)" <j...@apache.org>
Subject [jira] [Assigned] (FELIX-4674) Allow inclusion/exclusion of protocols in SSL connector
Date Mon, 20 Oct 2014 12:12:33 GMT

     [ https://issues.apache.org/jira/browse/FELIX-4674?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Felix Meschberger reassigned FELIX-4674:
----------------------------------------

    Assignee: Felix Meschberger

> Allow inclusion/exclusion of protocols in SSL connector
> -------------------------------------------------------
>
>                 Key: FELIX-4674
>                 URL: https://issues.apache.org/jira/browse/FELIX-4674
>             Project: Felix
>          Issue Type: Improvement
>          Components: HTTP Service
>    Affects Versions: http-2.3.0
>            Reporter: Dominique Pfister
>            Assignee: Felix Meschberger
>         Attachments: patch.txt
>
>
> With the recent security attack discovered called "POODLE" [1], it would be great to
make the set of SSL protocols Jetty accepts configurable through OSGI. I suggest to introduce
a string array property containing the list of protocols to disable, e.g. [ "SSLv3" ].
> [1] https://zmap.io/sslv3/



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message