447381 - Disable SSLv3 by default.

Excluded by default also SSLv2Hello.
2014-10-16 19:46:33 +02:00 · 2014-10-16 19:46:33 +02:00 · 90e9cfc535
parent aea5070e51
commit 90e9cfc535
1 changed files with 1 additions and 1 deletions
--- a/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java
+++ b/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java
@ -223,7 +223,7 @@ public class SslContextFactory extends AbstractLifeCycle
    public SslContextFactory(boolean trustAll)
    {
        setTrustAll(trustAll);
-        addExcludeProtocols("SSL", "SSLv2", "SSLv3");
+        addExcludeProtocols("SSL", "SSLv2", "SSLv2Hello", "SSLv3");
    }

    /**