Search code examples
minapoodle-attack

Apache Mina x Poodle bug

How do I disable ssl v3 support in apache mina SslFilter? https://mina.apache.org/

Solution

  • You can simply specify only the protocols supported (in this case, all protocols from the TLS family. Code:

    final SslFilter sslFilter = new SslFilter(sslContext);
sslFilter.setEnabledProtocols(new String[] {"TLSv1"});
acceptor.getFilterChain().addLast("ssl", sslFilter);