From: Krzysztof B. <kb...@un...> - 2017-06-07 07:43:59
|
W dniu 06.06.2017 o 13:36, Shiraz Memon pisze: > Hi, > > The vulnerability has been resolved. The main issue was the incorrect > cipher suite name. Although the ssllabs server test mentions the > TLS_RSA_WITH_3DES_EDE_CBC_SHA, alas the correct name > is SSL_RSA_WITH_3DES_EDE_CBC_SHA and I have guessed that from > http://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html#SupportedCipherSuites - > there is no such TLS_RSA.... cipher suite supported in JDK8. Yeah - the naming of those ciphersuites is very tricky. Good that this was solved. Cheers KB |