How to disable SSLv3 on JBoss

[rabbaa.gabriel]

Hi,

in most documentation we can find information on how to configure HTTPS connection and information about sslProtocol.

in most of them we found:

sslProtocol="TLS", see example at How to enable ssl

in other documentation we can found that we can skip the command because by default it use TLSv1

But how to instruct jboss to not use SSLv3 because when we try to use some tools to check which protocol it support after starting the server, we found that SSLv3 is enable.

I apache we can found:

SSLProtocol -all +SSLv3

[ilya40umov]

Hi Gabriel,

We have a very similar issue(the only difference is that we need to disable TLS and make Jboss working only with SSLv3).

Have you found an answer or some work around?

Regards,

Ilya

[rabbaa.gabriel]

Hi Ilya,

Nothing new. I think the better thing for you is to disable (remove) the uneeded ciphers with will get the same result.