CODEWITHSUNDEEP
javajakarta-eejvmssl-certificatewebsphere-7
dat
dat

Reputation: 11

sun.security.ssl.allowUnsafeRenegotiation

Does the option "-Dsun.security.ssl.allowUnsafeRenegotiation=true" work in IBM's JVM that ships with WebSphere 7

Upvotes: 1

Views: 4495

Answers (1)

erloewe
erloewe

Reputation: 1349

No. What would work is

com.ibm.jsse2.renegotiate=none

But even this option works only after you install the actualy fixes for the renegotiating vulnerabilities. The level with the required fixes is SR6.

Upvotes: 1

Related Questions