[
https://issues.apache.org/jira/browse/DIRSERVER-2073?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Emmanuel Lecharny resolved DIRSERVER-2073.
------------------------------------------
Resolution: Won't Fix
Two things :
- first of all, Java 6 is EOL since february 2013 (more than 2 years from now).
Java 7 is itself EOL since april 2015. You should use Java 8 even if we
explicitely ask for Java 7 on
http://directory.apache.org/apacheds/basic-ug/1.3-installing-and-starting.html
- TLS 1.0 is broken. Totally broken. There is no reason you would like to use
TLS 1.0, and not even TLS 1.1 :
https://www.globalsign.com/en/blog/poodle-vulnerability-expands-beyond-sslv3-to-tls/
> Unable to make SSL connection on Oracle java 6 for ApacheDS 2.0.0-M19
> ---------------------------------------------------------------------
>
> Key: DIRSERVER-2073
> URL: https://issues.apache.org/jira/browse/DIRSERVER-2073
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 2.0.0-M19
> Environment: Oracle jdk 1.6.0_45
> Reporter: Martin Choma
> Labels: security
>
> TLSv1.1 is not provided for Oracle JDK 1.6, which is used by ApacheDS
> 2.0.0-M19
> Is there a way to specify, that I want to use TLSv1.0 instead of default
> TLSv1.1 in ApacheDS 2.0.0-M19?
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.register(DefaultIoFilterChain.java:383)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.addLast(DefaultIoFilterChain.java:189)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChainBuilder.buildFilterChain(DefaultIoFilterChainBuilder.java:436)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor.addNow(AbstractPollingIoProcessor.java:532)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor.handleNewSessions(AbstractPollingIoProcessor.java:505)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor.access$400(AbstractPollingIoProcessor.java:67)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:1113)
> at
> org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918)
> at java.lang.Thread.run(Thread.java:662)
> Caused by: java.lang.IllegalArgumentException: TLSv1.1
> at
> com.sun.net.ssl.internal.ssl.ProtocolVersion.valueOf(ProtocolVersion.java:133)
> at
> com.sun.net.ssl.internal.ssl.ProtocolList.<init>(ProtocolList.java:38)
> at
> com.sun.net.ssl.internal.ssl.SSLEngineImpl.setEnabledProtocols(SSLEngineImpl.java:1821)
> at org.apache.mina.filter.ssl.SslHandler.init(SslHandler.java:176)
> at org.apache.mina.filter.ssl.SslFilter.onPreAdd(SslFilter.java:426)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.register(DefaultIoFilterChain.java:381)
> ... 10 more
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
