2 Replies Latest reply on Nov 21, 2011 10:28 AM by Gabriel Rabbaa

    How to disable SSLv3 on JBoss

    Gabriel Rabbaa Newbie

      Hi,

       

      in most documentation we can find information on how to configure HTTPS connection and information about sslProtocol.

      in most of them we found:

      sslProtocol="TLS", see example at How to enable ssl

      in other documentation we can found that we can skip the command because by default it use TLSv1

      But how to instruct jboss to not use SSLv3 because when we try to use some tools to check which protocol it support after starting the server, we found that SSLv3 is enable.

      I apache we can found:

      SSLProtocol -all +SSLv3