Re: Disable ciphers in Console VM's Java server #FREAK

2015-03-10 Thread Nux!
Thanks Ilya, I'll have a go at it. -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "ilya musayev" > To: dev@cloudstack.apache.org > Sent: Monday, 9 March, 2015 21:33:08 > Subject: Re: Disable ciphers

Re: Disable ciphers in Console VM's Java server #FREAK

2015-03-09 Thread ilya musayev
OpenJDK 1.7 is a requirement for this to work. On 3/9/15 2:31 PM, ilya musayev wrote: This might be relevant, ways to disable weak ciphers for port 8250, i'm under impression same can be done for all java related processes. This came from Citrix security team sometime in August, when we reache

Re: Disable ciphers in Console VM's Java server #FREAK

2015-03-09 Thread ilya musayev
This might be relevant, ways to disable weak ciphers for port 8250, i'm under impression same can be done for all java related processes. This came from Citrix security team sometime in August, when we reached and mentioned that 8250 exposes weak ciphers as per internal audit. Wh

Disable ciphers in Console VM's Java server #FREAK

2015-03-09 Thread Nux!
Hello, Can anyone advise how to disable SSLv2, SSLv3, TLSv1 and various ciphers in the Java process which serves CPVM:443 ? The CPVM is currently affected by the FREAK issue, we'd like to fix that. -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro