Loading

How to Disable Client Initiated TLS renegotiation in Java

게시 일자: Mar 2, 2024
과업

GOAL

To avoid potential TLS Renegotiation Denial-of-Service attack sometimes you need to disable the Client Initiated TLS renegotiation in your servers. This knowledge base articles explains how to achieve this in Java using the system property jdk.tls.rejectClientInitiatedRenegotiation that controls client-initiated renegotiation.
단계
To disable the Client-initiated TLS renegotiation you need to set the following property to the JVM:  
jdk.tls.rejectClientInitiatedRenegotiation=true

This will close the connection if any client tries to renegotiate, preventing the exploit of it for a DoS attack. 

You need to set this Java property at Mule Runtime startup in the ways explained in the Knowledge Base Article:  How can I set Mule and Java system properties at startup?

 
Knowledge 기사 번호

001117165

 
로드 중
Salesforce Help | Article