security - Spring Boot: Not to use TLSv1.0 -


right spring boot application supports tls1.0 tls1.1 , tls1.2. how disable tls1.0 avoid beast attacks?

below application.yml

server:   address: localhost   port: 8443   sessiontimeout: 30   ssl:     client-auth: need     key-store: keystore.jks     key-store-password: xxxx     key-alias: dev-demo     key-password: xxxx     protocol: tls     trust-store: truststore.jks     trust-store-password: xxxx     ciphers: tls_ecdh_anon_with_rc4_128_sha, tls_ecdh_ecdsa_with_rc4_128_sha,               tls_ecdh_rsa_with_rc4_128_sha, tls_ecdhe_ecdsa_with_rc4_128_sha              tls_krb5_export_with_rc4_40_md5, tls_krb5_export_with_rc4_40_sha              tls_krb5_with_rc4_128_md5, tls_krb5_with_rc4_128_sha              tls_dh_anon_with_aes_128_gcm_sha256, tls_dh_anon_with_aes_256_gcm_sha384              tls_dhe_dss_with_aes_128_gcm_sha256, tls_dhe_dss_with_aes_256_gcm_sha384              tls_ecdh_ecdsa_with_aes_128_gcm_sha256, tls_ecdh_ecdsa_with_aes_256_gcm_sha384              tls_ecdh_rsa_with_aes_128_gcm_sha256, tls_ecdh_rsa_with_aes_256_gcm_sha384              tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384              tls_rsa_with_rc4_128_md5, tls_rsa_with_rc4_128_sha              tls_rsa_with_aes_128_cbc_sha, tls_dhe_rsa_with_aes_128_cbc_sha              tls_ecdhe_rsa_with_rc4_128_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha              tls_rsa_with_aes_128_cbc_sha256, tls_dhe_rsa_with_aes_128_cbc_sha256              tls_rsa_with_aes_128_gcm_sha256, tls_dhe_rsa_with_aes_128_gcm_sha256              tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_128_gcm_sha256              tls_dhe_rsa_with_3des_ede_cbc_sha, tls_ecdhe_rsa_with_3des_ede_cbc_sha              tls_rsa_with_aes_256_cbc_sha, tls_dhe_rsa_with_aes_256_cbc_sha              tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_256_cbc_sha256              tls_dhe_rsa_with_aes_256_cbc_sha256, tls_rsa_with_aes_256_gcm_sha384              tls_dhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_256_cbc_sha384              tls_ecdhe_rsa_with_aes_256_gcm_sha384    tomcat:     #default max-threads 200     max-threads: 200     basedir: ./     access-log-enabled: true     access-log-pattern: "%h %l %u %t %r %s %b" security:   require-ssl: true 


Comments

Popular posts from this blog

How has firefox/gecko HTML+CSS rendering changed in version 38? -

javascript - Complex json ng-repeat -

jquery - Cloning of rows and columns from the old table into the new with colSpan and rowSpan -