Liberty on 村边的池塘 https://jerrywang1981.github.io/categories/liberty/ Recent content in Liberty on 村边的池塘 Hugo zh-CN Thu, 12 Nov 2020 19:31:52 +0800 Liberty Profile Tls V1 Gaps https://jerrywang1981.github.io/post/java/liberty-profile-tls-v1-gaps/ Thu, 12 Nov 2020 19:31:52 +0800 https://jerrywang1981.github.io/post/java/liberty-profile-tls-v1-gaps/ Gap - TLS version 1.0/1.1 detected 如果在做security scan的时候，有这两个gap,需要修改两个地方 liberty profile server.xml add sslProtocol="TLSv1.2" to ssl <ssl id="defaultSSLConfig" sslProtocol="TLSv1.2" keyStoreRef="defaultKeyStore" securityLevel="CUSTOM" enabledCiphers="TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 "/> server.env add JVM_ARGS=-Dhttps.protocols=TLSv1.2 SSL TLS Diffie Hellman Modulus 1024 Bits https://jerrywang1981.github.io/post/java/SSL-TLS-Diffie-Hellman-Modulus-1024-Bits/ Sat, 11 Apr 2020 21:17:25 +0800 https://jerrywang1981.github.io/post/java/SSL-TLS-Diffie-Hellman-Modulus-1024-Bits/ Liberty Profile 这个要修复，可能要修改两个地方。 server.xml 加入 1 2 3 <ssl id="defaultSSLConfig" keyStoreRef="defaultKeyStore" securityLevel="CUSTOM" enabledCiphers="TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 "/> jvm.options加入 -Djdk.tls.disabledAlgorithms=SSLv3, RC4, DH keySize <768