diff options
| author | cfu <cfu@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2010-11-22 17:13:41 +0000 |
|---|---|---|
| committer | cfu <cfu@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2010-11-22 17:13:41 +0000 |
| commit | 5b0a67e97e403b9529b0aeb1f28a34fcafd4c564 (patch) | |
| tree | 1f2fabcb90f4f7eab19c7b175fb3e7c051930e80 /pki/base/common/src/com/netscape/cmscore/ldapconn | |
| parent | 9d7cd2e5956a8d5fe7ae3b3c7a6b6c91fd4e3c1e (diff) | |
| download | pki-5b0a67e97e403b9529b0aeb1f28a34fcafd4c564.tar.gz pki-5b0a67e97e403b9529b0aeb1f28a34fcafd4c564.tar.xz pki-5b0a67e97e403b9529b0aeb1f28a34fcafd4c564.zip | |
Bug 651977 - turn off ssl2 for java servers (server.xml) - patch 2
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1583 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
Diffstat (limited to 'pki/base/common/src/com/netscape/cmscore/ldapconn')
| -rw-r--r-- | pki/base/common/src/com/netscape/cmscore/ldapconn/LdapJssSSLSocketFactory.java | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/pki/base/common/src/com/netscape/cmscore/ldapconn/LdapJssSSLSocketFactory.java b/pki/base/common/src/com/netscape/cmscore/ldapconn/LdapJssSSLSocketFactory.java index a662b84cd..b9f7d78eb 100644 --- a/pki/base/common/src/com/netscape/cmscore/ldapconn/LdapJssSSLSocketFactory.java +++ b/pki/base/common/src/com/netscape/cmscore/ldapconn/LdapJssSSLSocketFactory.java @@ -46,8 +46,12 @@ public class LdapJssSSLSocketFactory implements LDAPSSLSocketFactoryExt { SSLSocket s = null; try { + SSLSocket.enableSSL2Default(false); s = new SSLSocket(host, port); s.setUseClientMode(true); + s.enableSSL2(false); + s.enableSSL2Default(false); + s.enableV2CompatibleHello(false); SSLHandshakeCompletedListener listener = null; |