Specify available TLS versions

Fixes #162.
jenkinsci · Sep 27, 2017 · 2cc5cdb · 2cc5cdb
1 parent 1fad15a
commit 2cc5cdb
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/src/main/java/org/jenkinsci/plugins/stashNotifier/StashNotifier.java b/src/main/java/org/jenkinsci/plugins/stashNotifier/StashNotifier.java
@@ -409,9 +409,13 @@ protected HttpClient getHttpClient(PrintStream logger, Run<?, ?> run, String sta
 			// add unsafe trust manager to avoid thrown
 			// SSLPeerUnverifiedException
 			try {
-				SSLConnectionSocketFactory sslConnSocketFactory
-						= new SSLConnectionSocketFactory(buildSslContext(ignoreUnverifiedSSL,certificateCredentials),
-                        ignoreUnverifiedSSL ? SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER : null);
+                final SSLContext sslContext = buildSslContext(ignoreUnverifiedSSL, certificateCredentials);
+                SSLConnectionSocketFactory sslConnSocketFactory = new SSLConnectionSocketFactory(
+                        sslContext,
+                        new String[] { "TLSv1", "TLSv1.1", "TLSv1.2" },
+                        null,
+                        ignoreUnverifiedSSL ? SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER : null
+                );
 				builder.setSSLSocketFactory(sslConnSocketFactory);
 
 				Registry<ConnectionSocketFactory> registry