/[Apache-SVN]

Revision 1636509

Jump to revision:
Author:	mamta
Date:	Tue Nov 4 06:03:15 2014 UTC (9 years, 6 months ago)
Changed paths:	4
Log Message:	DERBY-6764(analyze impact of poodle security alert on Derby client - server ssl support) Removed SSLv3 and SSLv2Hello from list of enabled protocols on the client and server side to avoid poodle security breach. Also, changed NaiveTrustManager to use TLS as the default protocol rather than SSL. If NaiveTrustManager used SSL, then it won't find any enabled protocols for SSL after the removal of SSLv3 and SSLv2Hello. Changing it to TLS makes TLS protocols available for communication.

Changed paths

Path	Details
db/derby/code/trunk/java/client/org/apache/derby/client/net/NaiveTrustManager.java	modified , text changed
db/derby/code/trunk/java/client/org/apache/derby/client/net/OpenSocketAction.java	modified , text changed
db/derby/code/trunk/java/drda/org/apache/derby/impl/drda/NaiveTrustManager.java	modified , text changed
db/derby/code/trunk/java/drda/org/apache/derby/impl/drda/NetworkServerControlImpl.java	modified , text changed

infrastructure at apache.org	ViewVC Help
Powered by ViewVC 1.1.26