tomcat中server.xml中sslProtocol="TLS"含义，关闭SSLv3

tomcat中server.xml中sslProtocol="TLS"含义，关闭SSLv3

refurl：http://zhidao.baidu.com/link?url=gO88GYoDlkZIAwKgtb4Qau6O59rC8R7RCBEQhJ3DpObrIxbJXK3CmqrfxaC_WLfr907AZgdKgh_ijUd1t6rtDANUKOxpSxTGggO9d4Z6-5_

1) setProtocol="TLS" will enable SSLv3 and TLSv1
2) setProtocol="TLSv1.2" will enable SSLv3, TLSv1, TLSv1.1 and TLS v1.2
3) setProtocol="TLSv1.1" will enable SSLv3, TLSv1, and TLSv1.1
4) setProtocol="TLSv1" will enable SSLv3 and TLSv1
5) setProtocol="SSL" will enable SSLv3 and TLSv1
6) setProtocol="SSLv3" will enable SSLv3 and TLSv1
7) setProtocol="SSLv2" won't work

常见WebServer开启HTTPS并关闭SSLv3

前段时间爆出“OpenSSL Heartbleed”与“SSLv3中间人攻击”漏洞，为了快速搭建常见WebServer（Nginx、Apache、Tomcat）的HTTPS测试环境以及 关闭SSLv3，笔者Mark4z5整理了一份文档。

refurl：  http://blog.sina.com.cn/s/blog_777f9dbb0102v8de.html

关闭SSLv3

vi /usr/local/tomcat/conf/server.xml

#加上配置sslEnabledProtocols="TLSv1"（如下图）

 

注：隐性默认是SSLv3,TLSv1.0