javasslencryptionglassfish-2.x

Glassfish 2.0 Poodle vulnerability - How to disable SSL and allow TLS only


Is there any JVM option or Grizzly framework config file to prevent SSLv3 connections ? Somehow to disable SSLv3 and allow TLS cipher only. Any other idea is welcome.


Solution

  • Do you have a web admin console in GlassFish 2? In GlassFish 3, the admin can disable SSLv3 under Network Config / Network Listeners / http-listener-n / SSL tab

    See screenshots at http://javadude.wordpress.com/2010/04/06/getting-started-with-glassfish-v3-and-ssl/