Upgrade Jetty SSL

阅读更多

1. Upgrade JDK to 1.8

 

2. jetty-ssl.xml

  
  
  
    /etc/keystore-2015
    OBF:1wua1u9d1vgv1l1g1wgi1xmk1xmq1wfg1kxm1vfz1uaxxxxxx
    OBF:1wua1u9d1vgv1l1g1wgi1xmk1xmq1wfg1kxm1vfz1uaxxxxxx
    /etc/keystore-2015
    OBF:1wua1u9d1vgv1l1g1wgi1xmk1xmq1wfg1kxm1vfz1uaxxxxxxxx
	
	
	  
		.*NULL.*
		.*RC4.*
		.*MD5.*
		.*DES.*
		.*DSS.*
	  
	
	
		 
			 SSLv3
		 
	
  

  
    
      
        
        443
        30000
        2
        100
      
    
  

 3. add System Property -Djdk.tls.ephemeralDHKeySize=2048

 

4. test it https://www.ssllabs.com/ssltest/index.html

 

 

info:

http://www.openssl.org/docs/apps/ciphers.html

 

 

BTW: jetty OBF password

@echo off　

call cd /d %~dp0

echo %JAVA_8%

call "%JAVA_8%\bin\java" -cp jetty-http-9.3.0.v20150612.jar;jetty-util-9.3.0.v20150612.jar org.eclipse.jetty.util.security.Password PASSWORD

pause