Dominique Pfister created FELIX-4674:
----------------------------------------

             Summary: Allow inclusion/exclusion of protocols in SSL connector
                 Key: FELIX-4674
                 URL: https://issues.apache.org/jira/browse/FELIX-4674
             Project: Felix
          Issue Type: Improvement
          Components: HTTP Service
    Affects Versions: http-2.3.0
            Reporter: Dominique Pfister


With the recent security attack discovered called "POODLE" [1], it would be 
great to make the set of SSL protocols Jetty accepts configurable through OSGI. 
I suggest to introduce a string array property containing the list of protocols 
to disable, e.g. [ "SSLv3" ].

[1] https://zmap.io/sslv3/



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to