How to disable TLSv1.1 and TLSv1.0

[prabhakar12]

Hello,

I have JBoss 8.2 with jdk1.8.0_85 ,I have only  enabled TLSv1.2 protocal. Third party vendor application where they have enabled all TLS1.0/1.1 which they are going to shutdown TLSv1.0/1.1

[hemanthchadaram]

Disable TLSv1.0 and TLSv1.1

The Wildfly Undertow subsystem support enabled-protocols attribute, which is a comma separated list of protocols to be supported. For example enabled-protocols="TLSv1.1,TLSv1.2". We will just enable TLSv1.2.

============================================================================================

<subsystem xmlns="urn:jboss:domain:undertow:1.2">

<server name="default-server">

<https-listener name="default-https" socket-binding="https"

security-realm="SSLRealm"

enabled-protocols="TLSv1.2"/>

</server>

</subsystem>

[akonakon]

which file we need to change, i mean which file the above change contains to be done , is it standalone.xml

[ctomc]

it is always standalone.xml or any other standalone*.xml file you might be using to run your server.