My integration tests started failing when I upgraded to 9.3.7.v20160115
from 9.3.6.  SSL connections are failing. Turning debug logging on, the
cause appears to be this:

javax.net.ssl.SSLHandshakeException: no cipher suites in common

My testing is using pretty generic (ruby) SSL access, default client
settings.

Now some conjecture—looking through the available release notes:

https://github.com/eclipse/jetty.project/blob/jetty-9.3.x/VERSION.txt

> 485714 Update SSL configuration to mitigate SLOTH vulnerability
>

But the bugzilla issue sounds incomplete:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=485714#c2

…and despite the claim that the change was reverted, this at least made it
into the release:

https://github.com/eclipse/jetty.project/commit/0a1b0b2bc69ea7e7f5f44992f47a84f926cdeebb

Please advise? Thanks.

—David
_______________________________________________
jetty-users mailing list
[email protected]
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to