How to force java server to accept only tls 1.2 and reject tls 1.0 and tls 1.1 connections

前端 未结 3 1036
佛祖请我去吃肉
佛祖请我去吃肉 2020-11-27 17:19

I have a HTTPS web service running on Java 7. I need to make changes so that this service only accepts TLS1.2 connection and reject SSL3, TLS1.0 and TLS1.1.

I have ad

3条回答
  •  迷失自我
    2020-11-27 18:12

    Just a small remark;

    In the question you stated that you generated a 2048 size certificate with MD5. But in the cert path alg you disabled MD5 so this normally should not work. Secondly Server certificates generated with a MD5 hash are banned from modern browsers such as Internet Explorer 10/Edge.

    I would like to advice you to generate your Server certificate at least with a SHA256 or < hash.

提交回复
热议问题