This week's book giveaway is in the Design forum.
We're giving away four copies of Building Microservices and have Sam Newman on-line!
See this thread for details.
The moose likes Other Java Products and Servers and the fly likes Sesion renegotiation and JDK 1.6 20 with Pramati 5.0 SP3 Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Building Microservices this week in the Design forum!
JavaRanch » Java Forums » Products » Other Java Products and Servers
Bookmark "Sesion renegotiation and JDK 1.6 20 with Pramati 5.0 SP3" Watch "Sesion renegotiation and JDK 1.6 20 with Pramati 5.0 SP3" New topic
Author

Sesion renegotiation and JDK 1.6 20 with Pramati 5.0 SP3

Ajit Kanada
Ranch Hand

Joined: Jan 23, 2001
Posts: 95
Hi,

We have added Dsun.security.ssl.allowUnsafeRenegotiation=false in our Pramati Server startup script and its using
JDK 1.6_20.

With JDK 1.6_20 Session renegotiation is disabled by default.But in a security audit our server was found vulnerable to "Sesion renegotiation attack".

Any clues if this is a problem with the fix which is present in JDK 1.6_20 ?

Ajit


Thankx
Ajit
 
Have you checked out Aspose?
 
subject: Sesion renegotiation and JDK 1.6 20 with Pramati 5.0 SP3
 
It's not a secret anymore!