Loading

How to Disable Client Initiated TLS renegotiation in Java

Date de publication: Mar 2, 2024
Tâche

GOAL

To avoid potential TLS Renegotiation Denial-of-Service attack sometimes you need to disable the Client Initiated TLS renegotiation in your servers. This knowledge base articles explains how to achieve this in Java using the system property jdk.tls.rejectClientInitiatedRenegotiation that controls client-initiated renegotiation.
Étapes
To disable the Client-initiated TLS renegotiation you need to set the following property to the JVM:  
jdk.tls.rejectClientInitiatedRenegotiation=true

This will close the connection if any client tries to renegotiate, preventing the exploit of it for a DoS attack. 

You need to set this Java property at Mule Runtime startup in the ways explained in the Knowledge Base Article:  How can I set Mule and Java system properties at startup?

 
Numéro d’article de la base de connaissances

001117165

 
Chargement
Salesforce Help | Article