Hi,
How can I disable SSLv3 in TSPLUs?
Regards
Poodle??
Re: Poodle??
Hello,
if you start webserver and call some https page you will get inside weblog.txt all supported protocols + ciphers at the run time.
Now if you start it on Java7,8, and if you create empty file tls.bin, it will activate TLSv1.1 and TLSv1.2 protocols (these are disabled by default due one bug on older iOS systems with SSL Websockets - because of compatibility reasons)
So empty tls.bin activates all available protocols.
Now to disable some protocols or cihpers from the list just create file in webserver directory tls.bin with following content comma separated
SSLv2Hello, SSLv3, SSL_RSA_WITH_RC4_128_MD5
Now save it and restart the server in GUI and check weblog.txt again, it will show updated status of disabled protocols or ciphers.
In your case to disable only SSLv3 just save this string
SSLv3
and done..
if you start webserver and call some https page you will get inside weblog.txt all supported protocols + ciphers at the run time.
Now if you start it on Java7,8, and if you create empty file tls.bin, it will activate TLSv1.1 and TLSv1.2 protocols (these are disabled by default due one bug on older iOS systems with SSL Websockets - because of compatibility reasons)
So empty tls.bin activates all available protocols.
Now to disable some protocols or cihpers from the list just create file in webserver directory tls.bin with following content comma separated
SSLv2Hello, SSLv3, SSL_RSA_WITH_RC4_128_MD5
Now save it and restart the server in GUI and check weblog.txt again, it will show updated status of disabled protocols or ciphers.
In your case to disable only SSLv3 just save this string
SSLv3
and done..
TSplus HTML5 and Java web engineer