[patch] Proof of concept patch

JSSESocketFactory.java.patch (text/plain), 1.38 KB, created by Ognjen Blagojevic on 2014-01-11 16:43:11 UTC

(hide)

Description: Proof of concept patch

Filename:

MIME Type:

Creator: Ognjen Blagojevic

Created: 2014-01-11 16:43:11 UTC

Size: 1.38 KB

patch

obsolete

>Index: java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java >=================================================================== >--- java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java (revision 1556981) >+++ java/org/apache/tomcat/util/net/jsse/JSSESocketFactory.java (working copy) >@@ -52,6 +52,7 @@ > import javax.net.ssl.ManagerFactoryParameters; > import javax.net.ssl.SSLContext; > import javax.net.ssl.SSLException; >+import javax.net.ssl.SSLParameters; > import javax.net.ssl.SSLServerSocket; > import javax.net.ssl.SSLServerSocketFactory; > import javax.net.ssl.SSLSession; >@@ -749,6 +750,19 @@ > > socket.setEnabledCipherSuites(enabledCiphers); > socket.setEnabledProtocols(enabledProtocols); >+ >+ SSLParameters sslParameters = socket.getSSLParameters(); >+ java.lang.reflect.Method method; >+ try { >+ method = sslParameters.getClass().getMethod("setUseCipherSuitesOrder", Boolean.TYPE); >+ method.invoke(sslParameters, true); >+ } catch (NoSuchMethodException e) { >+ System.out.println("Your JDK doesn't support method setUseCipherSuitesOrder."); >+ } catch (Exception e) { >+ throw new RuntimeException(e); >+ } >+ socket.setSSLParameters(sslParameters); >+ > > // we don't know if client auth is needed - > // after parsing the request we may re-handshake View Attachment As Diff View Attachment As Raw

This is ASF Bugzilla: the Apache Software Foundation bug system. In case of problems with the functioning of ASF Bugzilla, please contact bugzilla-admin@apache.org. Please Note: this e-mail address is only for reporting problems with ASF Bugzilla. Mail about any other subject will be silently ignored.

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    Remember [x]
  • | Forgot Password
    Login: [x]