Re: [Unity-idm-discuss] disabledCipherSuites Parameter

[Krzysztof B. <go...@ic...>]

Hi Sander,

W dniu 31.07.2015 15:07, Sander Apweiler pisze:
> Hi all,
>
> i Want to Disable some SSL Ciphers in unity and set the following
> parameter in unityServer.conf:
>
> unityServer.core.httpServer.disabledCipherSuites=ECDHE-RSA-RC4-SHA
> RC4-MD5 RC4-SHA
>
> After restart the server still uses ECDHE-RSA-RC4-SHA cipher. Are there
> some additional steps to do than restart?


Well, this shouldn't be the case. In general those settings are passed 
directly to an HTTPS server (Jetty) and that's all that Unity does with 
them. I'll check it up, however this is strange as this feature is 
covered by unit test.

Best,
Krzysztof