Loading

How to Disable Client Initiated TLS renegotiation in Java

Publish Date: Mar 2, 2024
Task

GOAL

To avoid potential TLS Renegotiation Denial-of-Service attack sometimes you need to disable the Client Initiated TLS renegotiation in your servers. This knowledge base articles explains how to achieve this in Java using the system property jdk.tls.rejectClientInitiatedRenegotiation that controls client-initiated renegotiation.
Steps
To disable the Client-initiated TLS renegotiation you need to set the following property to the JVM:  
jdk.tls.rejectClientInitiatedRenegotiation=true

This will close the connection if any client tries to renegotiate, preventing the exploit of it for a DoS attack. 

You need to set this Java property at Mule Runtime startup in the ways explained in the Knowledge Base Article:  How can I set Mule and Java system properties at startup?

 
Knowledge Article Number

001117165

 
Loading
Salesforce Help | Article