Disabling old TLS versions used by Java Open JDK

During the testing ,seems JDK8, 11 are not quite compatible with TLS 1.3 .We need to disable tls 1.3 to make sure all applications to work well. Here is the introduction How.

TLS is a protocol that is used to safely communicate between the web browser and the Horizzon Server. When you use the Horizzon Server in combination with Java 11 Open JDK, TLS version 1.2 is enabled by default. Older versions of TLS, like 1.0 and 1.1 can be labeled as unsafe. If your organization policy requires you to actively disable these protocols, there are two ways to do this. The first is the quick solution, the second is the recommended solution.

Add the correct protocol version to the server.wrapper.conf file

Add the following line to the server.wrapper.conf file in the conf folder of the Horizzon Server installation and save the changes:

wrapper.java.additional.10 = -Dhttps.protocols=TLSv1.2

Disable older versions in Java

Disable older versions in Java, applying this change to all programs using your Java (so not only for the Bizzdesign Horizzon Server). To do this, edit the java.security file. It can be found in the following location:

...../<java installation folder>/conf/security

Add the algorithms you want to disable to the jdk.tls.disabledAlgorithms property in the file and save the changes. For example, disabling TLS1.0 and TLS1.1 would look as follows:

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \

EC keySize < 224, 3DES_EDE_CBC, anon, NULL**, TLSv1, TLSv1.1**

For more information, please refer to https://www.java.com/en/configure_crypto.html#DisableTLS.

最后編輯于
?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成,瀏覽時(shí)請結(jié)合常識與多方信息審慎甄別。
平臺(tái)聲明:文章內(nèi)容(如有圖片或視頻亦包括在內(nèi))由作者上傳并發(fā)布,文章內(nèi)容僅代表作者本人觀點(diǎn),簡書系信息發(fā)布平臺(tái),僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

友情鏈接更多精彩內(nèi)容