security - Spring Boot: Not to use TLSv1.0 -

-

right spring boot application supports tls1.0 tls1.1 , tls1.2. how disable tls1.0 avoid beast attacks?

below application.yml

server:   address: localhost   port: 8443   sessiontimeout: 30   ssl:     client-auth: need     key-store: keystore.jks     key-store-password: xxxx     key-alias: dev-demo     key-password: xxxx     protocol: tls     trust-store: truststore.jks     trust-store-password: xxxx     ciphers: tls_ecdh_anon_with_rc4_128_sha, tls_ecdh_ecdsa_with_rc4_128_sha,               tls_ecdh_rsa_with_rc4_128_sha, tls_ecdhe_ecdsa_with_rc4_128_sha              tls_krb5_export_with_rc4_40_md5, tls_krb5_export_with_rc4_40_sha              tls_krb5_with_rc4_128_md5, tls_krb5_with_rc4_128_sha              tls_dh_anon_with_aes_128_gcm_sha256, tls_dh_anon_with_aes_256_gcm_sha384              tls_dhe_dss_with_aes_128_gcm_sha256, tls_dhe_dss_with_aes_256_gcm_sha384              tls_ecdh_ecdsa_with_aes_128_gcm_sha256, tls_ecdh_ecdsa_with_aes_256_gcm_sha384              tls_ecdh_rsa_with_aes_128_gcm_sha256, tls_ecdh_rsa_with_aes_256_gcm_sha384              tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384              tls_rsa_with_rc4_128_md5, tls_rsa_with_rc4_128_sha              tls_rsa_with_aes_128_cbc_sha, tls_dhe_rsa_with_aes_128_cbc_sha              tls_ecdhe_rsa_with_rc4_128_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha              tls_rsa_with_aes_128_cbc_sha256, tls_dhe_rsa_with_aes_128_cbc_sha256              tls_rsa_with_aes_128_gcm_sha256, tls_dhe_rsa_with_aes_128_gcm_sha256              tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_128_gcm_sha256              tls_dhe_rsa_with_3des_ede_cbc_sha, tls_ecdhe_rsa_with_3des_ede_cbc_sha              tls_rsa_with_aes_256_cbc_sha, tls_dhe_rsa_with_aes_256_cbc_sha              tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_256_cbc_sha256              tls_dhe_rsa_with_aes_256_cbc_sha256, tls_rsa_with_aes_256_gcm_sha384              tls_dhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_256_cbc_sha384              tls_ecdhe_rsa_with_aes_256_gcm_sha384    tomcat:     #default max-threads 200     max-threads: 200     basedir: ./     access-log-enabled: true     access-log-pattern: "%h %l %u %t %r %s %b" security:   require-ssl: true


Comments

Post a Comment

Popular posts from this blog

How has firefox/gecko HTML+CSS rendering changed in version 38? -

-
i have a little website header no longer renders correctly, since updating firefox 38.0.5 [the faceplant logo missing top right, , main logo no longer centred]. still renders expected in other browsers. how has engine's rendering changed in update? according mdn , list of changes is: css support ruby-position , ruby-align have been added , available default ( bug 1055676 , bug 1123917 , bug 1039006 ). the :unresolved pseudo-class has been implemented custom elements ( bug 1111633 ). the predefined style ethiopic-numeric uses space, instead of dot, suffix match recent change spec ( bug 1120721 ). css transitions on generated content (with ::before , ::after ) on both inline , block splits them start expected specification ( bug 1110277 ). the implementation of css logical properties made big progress. [...] how css transitions start has been modified match recent change of specifications, aiming @ having interoperable behavio...
Read more

android - CollapsingToolbarLayout: position the ExpandedText programmatically -

-
i using new android support design view collapsingtoolbarlayout. have need position expandedtitle programmatically. actually way set position expandedtitle in .xml file (example here: https://goo.gl/l5h5fc ) there no public api set text position programmatically , fields private . do know if it's possible without reflection or 'hacky' tricks? i have solved problem exposing properties via reflection ( https://gist.github.com/fpezzato/8e7d45112883dbbc5ffb ), works don't use trick in production code. @google: please no more private or final stuff! :)
Read more

Listeners to visualise results of load test in JMeter -

-
i want run load test in non-gui mode , save results in .csv file. (i have not modified .properties files, standard information saved) i plan load file , visualise results jmeter’s listeners. which listeners suited purpose? should avoid @ cost, might cause me misinterpret information? (e.g. in view results tree response data empty have - - not saved this. however, there has in fact been response. if saw listener might think there hasn’t been one. since want avoid this, listeners have gain information needed .csv file.) i’d know both jmeter listeners plugins. if running test in non-ui mode ideally should disable listeners in script. use '-l' option store test results .jtl extension. can later open jtl file jmeter. aggregate report or summary report should summarize test results , response time , throughput. if want plot graphs see trends on test duration can use http://jmeter-plugins.org/#/ standard , lib set. i suggest following listeners: response ...
Read more