Skip to content

Commit df013bf

Browse files
authored
fix: exclude tls_rsa ciphers (#1737)
* exclude tls_rsa ciphers Signed-off-by: achmelo <a.chmelo@gmail.com> * remove exclude ciphers Signed-off-by: achmelo <a.chmelo@gmail.com> * revert Signed-off-by: achmelo <a.chmelo@gmail.com>
1 parent 82fa3bf commit df013bf

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

apiml-common/src/main/java/org/zowe/apiml/product/web/HttpConfig.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -181,7 +181,7 @@ private void setTruststore(SslContextFactory sslContextFactory) {
181181
public SslContextFactory.Client jettyClientSslContextFactory() {
182182
SslContextFactory.Client sslContextFactory = new SslContextFactory.Client();
183183
sslContextFactory.setProtocol(protocol);
184-
sslContextFactory.setExcludeCipherSuites("^.*_(MD5|SHA|SHA1)$");
184+
sslContextFactory.setExcludeCipherSuites("^.*_(MD5|SHA|SHA1)$", "^TLS_RSA_.*$");
185185
setTruststore(sslContextFactory);
186186
log.debug("jettySslContextFactory: {}", sslContextFactory.dump());
187187
sslContextFactory.setHostnameVerifier(secureHostnameVerifier());

0 commit comments

Comments
 (0)