SLOTH protection #631

Exclude all MD5 and SHA1 ciperhs, not just RSA based ones.
2016-07-21 12:39:07 +10:00 · 2016-07-21 12:39:07 +10:00 · 21a618e6a8
parent 2db91a88cf
commit 21a618e6a8
1 changed files with 1 additions and 4 deletions
--- a/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java
+++ b/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java
@ -250,10 +250,7 @@ public class SslContextFactory extends AbstractLifeCycle
    {
        setTrustAll(trustAll);
        addExcludeProtocols("SSL", "SSLv2", "SSLv2Hello", "SSLv3");
-        setExcludeCipherSuites(
-                "^.*_RSA_.*_(MD5|SHA|SHA1)$",
-                "SSL_DHE_DSS_WITH_DES_CBC_SHA",
-                "SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA");
+        setExcludeCipherSuites("^.*_(MD5|SHA|SHA1)$");
    }

    /**