Loading...

XML

Word

Printable

Type: Bug
Resolution: Won't Do
Priority: Blocker
Fix Version/s: None
Affects Version/s: None
Component/s: Security
Labels:
- cipher-suite
- ssl

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.0.GA

SFDC Cases Counter:
SFDC Cases Links:

This results in CBC and being preferred over GCM, and CBC is not suitable for HTTP/2.

Alternatively the default order could be modified to put GCM ciphers first.

is related to

JBEAP-9690 Inadequate security with Elytron + HTTP2

Verified

relates to

JBEAP-9871 Elytron, specify cipher-suite-filter default

Verified

Assignee:: Darran Lofthouse

Reporter:: Stuart Douglas

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2017/03/23 8:48 PM

Updated:: 2021/10/24 6:41 AM

Resolved:: 2017/05/09 11:28 AM