Re: How to deal with LogJam Vulnerability?

2015-08-29 Thread George Sexton
On 8/29/2015 12:58 PM, George Sexton wrote: On 8/25/2015 12:01 AM, Nikitha Benny wrote: Hi All, I am using Tomcat version 7.00.062 supported on JRE 8u45. How do i disable the LogJam Vulnerability? Here's a pretty nice article: https://blog.eveoh.nl/2014/02/tls-ssl-ciphers-pfs-tomcat/ H

Re: How to deal with LogJam Vulnerability?

2015-08-29 Thread George Sexton
On 8/25/2015 12:01 AM, Nikitha Benny wrote: Hi All, I am using Tomcat version 7.00.062 supported on JRE 8u45. How do i disable the LogJam Vulnerability? Here's a pretty nice article: https://blog.eveoh.nl/2014/02/tls-ssl-ciphers-pfs-tomcat/ There's an updated connector configuration near t

How to deal with LogJam Vulnerability?

2015-08-24 Thread Nikitha Benny
Hi All, I am using Tomcat version 7.00.062 supported on JRE 8u45. How do i disable the LogJam Vulnerability? I have added a line in the java.security file of the JRE. jdk.tls.disabledAlgorithms=DH Is this good enough? Or do we need to add DiffieHelmann also? jdk.tls.disabledAlgorithms=DH, Diffie