[JIRA] (JENKINS-56591) make cipher exclusion configurable in Winstone

[email protected] (JIRA) Mon, 25 Mar 2019 17:31:10 -0700

Title: Message Title

Olivier Lamy commented on

 
                                                                --excludeCipherSuites    = set the ciphers to exclude (comma separated, use blank quote " " to exclude none) 
                               (default is 
                               // Exclude weak / insecure ciphers 
                               "^.*_(MD5|SHA|SHA1)$", 
                               // Exclude ciphers that don't support forward secrecy 
                               "^TLS_RSA_.*$", 
                               // The following exclusions are present to cleanup known bad cipher 
                               // suites that may be accidentally included via include patterns. 
                               // The default enabled cipher list in Java will not include these 
                               // (but they are available in the supported list). 
                               "^SSL_.*$", 
                               "^.*_NULL_.*$", 
                               "^.*_anon_.*$"   
                                                            

Add Comment

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

[JIRA] (JENKINS-56591) make cipher exclusion configurable in Winstone

Reply via email to