diff options
| author | Bjørn Christian Seime <bjorncs@verizonmedia.com> | 2021-02-24 12:24:48 +0100 |
|---|---|---|
| committer | Bjørn Christian Seime <bjorncs@verizonmedia.com> | 2021-02-24 12:24:48 +0100 |
| commit | b61cb93e0ecd770fa07c1b67269d81e17bcfd11a (patch) | |
| tree | 162b2e3d09df9201196328e4d3ac611c96d7bb43 /security-utils | |
| parent | c362232aa418ed66c48a3d925544affde310dd7a (diff) | |
Disable TLSV1.3
Diffstat (limited to 'security-utils')
| -rw-r--r-- | security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java b/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java index a54a3556685..eef05d4f4f2 100644 --- a/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java +++ b/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java @@ -34,7 +34,8 @@ public interface TlsContext extends AutoCloseable { "TLS_AES_256_GCM_SHA384", // TLSv1.3 "TLS_CHACHA20_POLY1305_SHA256"); // TLSv1.3, Java 12 - Set<String> ALLOWED_PROTOCOLS = com.yahoo.vespa.jdk8compat.Set.of("TLSv1.2", "TLSv1.3"); + // TODO Enable TLSv1.3 after upgrading to JDK 17 + Set<String> ALLOWED_PROTOCOLS = com.yahoo.vespa.jdk8compat.Set.of("TLSv1.2"); String SSL_CONTEXT_VERSION = "TLS"; // Use SSLContext implementations that supports all TLS versions /** |