Java + TLS1.0/TLS1.1

Heads up that TLS1.1 and TLS1.0 are explicitly disabled in the latest version of Oracle JRE/JDK.

 

You would think you can just go and re-enable them here but this isn’t enough

 

But oracle clearly doesn’t trust us pesky users to do security. You also need to update your java.security file.

 

So on the box I was looking at today the file you need to edit

“C:\Program Files\Java\jre1.8.0_291\lib\security\java.security”

 

And remove the red bits

 

jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, \

    DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \

    include jdk.disabled.namedCurves

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...