Skip to content

[BUG] TLS Version is set as minimum supported to JVM #45

New issue
New issue
Closed
Closed
[BUG] TLS Version is set as minimum supported to JVM#45
Labels
bugSomething isn't working

Description

@Harishdr27
Harishdr27
opened on Jul 21, 2023

Describe the bug
security scan complains about implementation of TLS.
SSLContext.getInstance("TLS")

rest/Rest.java 79
SslConfig.java 581
SslConfig.java 646

This can be change changed to a newer version of TLS as an example to resolve the vulnerability

from
SSLContext.getInstance("TLS")
to
SSLContext.getInstance("TLSv1.2").

To Reproduce

Activity

  1. Harishdr27
    added
    bugSomething isn't working
    on Jul 21, 2023
  2. henryx
    changed the title [-][BUG] [/-] [+][BUG] TLS Version is set as minimum supported to JVM[/+] on Aug 14, 2023

  3. henryx commented on Aug 14, 2023

    @henryx
    henryx
    on Aug 14, 2023
    Collaborator

    Thank you for reporting, I've set minimum TLS version as 1.2

  4. henryx
    closed this as completedon Aug 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions