Skip to content

Commit

Permalink
remove "excludeCipherSuites" from jetty
Browse files Browse the repository at this point in the history
reason: these are historic settings taken from an exemplary jetty-https.xml
back then. i am not sure how relevant and valid they are anymore. defaults
of jetty should be good enough.
  • Loading branch information
goekay committed Dec 21, 2024
1 parent 4df8da0 commit a34b6d6
Showing 1 changed file with 0 additions and 8 deletions.
8 changes: 0 additions & 8 deletions src/main/java/de/rwth/idsg/steve/JettyServer.java
Original file line number Diff line number Diff line change
Expand Up @@ -135,14 +135,6 @@ private ServerConnector httpsConnector(HttpConfiguration httpConfig) {
sslContextFactory.setKeyStorePath(CONFIG.getJetty().getKeyStorePath());
sslContextFactory.setKeyStorePassword(CONFIG.getJetty().getKeyStorePassword());
sslContextFactory.setKeyManagerPassword(CONFIG.getJetty().getKeyStorePassword());
sslContextFactory.setExcludeCipherSuites(
"SSL_RSA_WITH_DES_CBC_SHA",
"SSL_DHE_RSA_WITH_DES_CBC_SHA",
"SSL_DHE_DSS_WITH_DES_CBC_SHA",
"SSL_RSA_EXPORT_WITH_RC4_40_MD5",
"SSL_RSA_EXPORT_WITH_DES40_CBC_SHA",
"SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
"SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA");

// SSL HTTP Configuration
HttpConfiguration httpsConfig = new HttpConfiguration(httpConfig);
Expand Down

0 comments on commit a34b6d6

Please sign in to comment.