fix(sprint1): 修复SSL renegotiation攻击漏洞

ffay · Jul 23, 2019 · f28a981 · f28a981
1 parent 13b1d23
commit f28a981
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/proxy-server/src/main/resources/startup.sh b/proxy-server/src/main/resources/startup.sh
@@ -23,7 +23,7 @@ CLOG_FILE=$LOGS_DIR/gc.log
 LIB_DIR=$DEPLOY_DIR/lib
 LIB_JARS=`ls $LIB_DIR|grep .jar|awk '{print "'$LIB_DIR'/"$0}'| xargs | sed "s/ /:/g"`
 
-JAVA_OPTS=" -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true "
+JAVA_OPTS=" -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true  -Djdk.tls.rejectClientInitiatedRenegotiation=true"
 JAVA_DEBUG_OPTS=""
 if [ "$1" = "debug" ]; then
     JAVA_DEBUG_OPTS=" -Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,address=8000,server=y,suspend=n "