Search code examples
sslwildfly-8

Disable SSLv3 in Wildfly app server

How to disable SSLv3 in Wildfly app server. Following configuration

<server-identities>
    <ssl protocol="TLSv1">
        <keystore path="https.keystore" relative-to="keystore.home" keystore-password="secret" alias="https" key-password="secret" />
    </ssl>
</server-identities>

falls back to SSLv3, if SSLv3 requested. Looks like associated bug https://bugzilla.redhat.com/show_bug.cgi?id=1153853 in redhat is closed as "WONTFIX"

Solution

  • Add [enabled-protocols="TLSv1,TLSv1.1,TLSv1.2"] to element. It works with Wildfly 8.2