Exclude SSLv3 from Gitblit GO https protocols

armos-java · Nov 4, 2014 · 4aff001 · 4aff001
1 parent b76107b
commit 4aff001
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/com/gitblit/GitblitSslContextFactory.java b/src/main/java/com/gitblit/GitblitSslContextFactory.java
@@ -54,6 +54,7 @@ public GitblitSslContextFactory(String certAlias, File keyStore, File clientTrus
 		setKeyStorePassword(storePassword);
 		setTrustStorePath(clientTrustStore.getAbsolutePath());
 		setTrustStorePassword(storePassword);
+		addExcludeProtocols("SSLv3");
 
 		logger.info("   keyStorePath   = " + keyStore.getAbsolutePath());
 		logger.info("   trustStorePath = " + clientTrustStore.getAbsolutePath());