Loading

How to Disable Client Initiated TLS renegotiation in Java

Udgivelsesdato: Mar 2, 2024
Opgave

GOAL

To avoid potential TLS Renegotiation Denial-of-Service attack sometimes you need to disable the Client Initiated TLS renegotiation in your servers. This knowledge base articles explains how to achieve this in Java using the system property jdk.tls.rejectClientInitiatedRenegotiation that controls client-initiated renegotiation.
Trin
To disable the Client-initiated TLS renegotiation you need to set the following property to the JVM:  
jdk.tls.rejectClientInitiatedRenegotiation=true

This will close the connection if any client tries to renegotiate, preventing the exploit of it for a DoS attack. 

You need to set this Java property at Mule Runtime startup in the ways explained in the Knowledge Base Article:  How can I set Mule and Java system properties at startup?

 
Vidensartikelnummer

001117165

 
Indlæser
Salesforce Help | Article