jetty java 禁用目录列表_java – 如何禁用Jetty中的SSLv3协议以防止Poodle Attack

是否有任何特定的排除列表可用，仅禁用SSLv3密码不是TLSv1 / 2。

我有8号码头，现在升级到9号不是一个选择。我当前的jetty-ssl.xml如下所示

.........

SSL_RSA_WITH_NULL_MD5

SSL_RSA_WITH_NULL_SHA

SSL_RSA_EXPORT_WITH_RC4_40_MD5

SSL_RSA_WITH_RC4_128_MD5

SSL_RSA_WITH_RC4_128_SHA

SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5

SSL_RSA_WITH_IDEA_CBC_SHA

SSL_RSA_EXPORT_WITH_DES40_CBC_SHA

SSL_RSA_WITH_DES_CBC_SHA

SSL_RSA_WITH_3DES_EDE_CBC_SHA

SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA

SSL_DH_DSS_WITH_DES_CBC_SHA

SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA

SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA

SSL_DH_RSA_WITH_DES_CBC_SHA

SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA

SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA

SSL_DHE_DSS_WITH_DES_CBC_SHA

SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA

SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA

SSL_DHE_RSA_WITH_DES_CBC_SHA

SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA

SSL_DH_anon_EXPORT_WITH_RC4_40_MD5

SSL_DH_anon_WITH_RC4_128_MD5

SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA

SSL_DH_anon_WITH_DES_CBC_SHA

SSL_DH_anon_WITH_3DES_EDE_CBC_SHA

SSL_FORTEZZA_KEA_WITH_NULL_SHA

SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA

SSL_FORTEZZA_KEA_WITH_RC4_128_SHA

SSL_DHE_RSA_WITH_AES_128_CBC_SHA

SSL_RSA_WITH_AES_128_CBC_SHA

仍然当我运行“sslscan –no-failed –ssl3 localhost：443”我得到

Supported Server Cipher(s):

Accepted SSLv3 128 bits DHE-RSA-AES128-SHA

Accepted SSLv3 128 bits AES128-SHA

Prefered Server Cipher(s):

SSLv3 128 bits DHE-RSA-AES128-SHA