How to enable TLSv1.2 only in JBoss AS 7.0.1 (Poodle TLSv1 issue)

[sivasankar1631]

I am using JBoss AS 7.0.1. I was trying to disable all the protocols except TLSv1.2. I don know how to configure the xml file for this requirement.

https://community.qualys.com/blogs/securitylabs/2014/12/08/poodle-bites-tls

https://www.us-cert.gov/ncas/alerts/TA14-290A

https://www.imperialviolet.org/2014/12/08/poodleagain.html

Above links talk about the Poodle TLS vulnerability.

I am trying to fix my application because of this issue. Could you please suggest any solution or work around for this issue.

Thanks in advance.

Regards,

Sivasankar

[ctomc]

<ssl

....

   protocol="TLSv1.2"
....
   />

[sivasankar1631]

<subsystem xmlns="urn:jboss:domain:web:1.1" default-virtual-server="default-host" native="false">

    <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http" redirect-port="4506"/>

    <connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" secure="true" max-connections="150">

        <ssl name="https" password="password" certificate-key-file="server keystore path" protocol="TLSv1.2" verify-client="optional" ca-certificate-file="cert file path"/>

    </connector>

    <virtual-server name="default-host" enable-welcome-root="true">

        <alias name="localhost"/>

        <alias name="example.com"/>

    </virtual-server>

</subsystem>

After changing the protocol value from "TLSv1,TLSv1.1,TLSv1.2" to "TLSv1.2", the service crashed. It didn't work. Pls look at the xml snippet above.

[ctomc]

for TLS1.2 you need JDK7 or newer as support for it was added in 7

see http://docs.oracle.com/javase/7/docs/technotes/guides/security/enhancements-7.html for more.

in any case i would advise you to upgrade to something newer than 7.0 series...

[sivasankar1631]

I was running my application with JDK 6. After upgrading the application with JDK7 it worked.

I appreciate your help Tomaz.

Thank you.