[rfc][icedtea-web] https probing

helpcrypto helpcrypto helpcrypto at gmail.com
Tue Aug 26 09:27:50 UTC 2014


On Tue, Aug 26, 2014 at 10:27 AM, Jacob Wisor <gitne at gmx.de> wrote:

> On 08/26/2014 09:28 AM, helpcrypto helpcrypto wrote:
>
>> I have some legacy servers here at work, which are having trouble with
>> Oracle
>> Java 8 (with TLS1.1/2.0 enabled by default).
>>
>
> Are those servers publicly accessible? If so I could use them for testing
> too, well at least after Jiri has applied basic fixes to his patch.
>
You know, it is quite difficult to find insecure SSL 2.0 servers to setup
> today, mostly because they have been replaced by secure servers.
>
Some of them are. Dont know if those are affected.
I'll let you know.


> Anyhow, even if those servers are on the internet only you really should
> update them to support SSL 3.0 or later. ;-)
>
>
>  Is there any chance this issue is somewhat related to this? (i havent
>> tested
>> this on Icedtea)
>>
>> Will it help you if I test something? (Perhaps I'm able to reproduce
>> something)
>>
>
> Oh certainly, the more testers the better! ;-) So, testers are always
> welcome.
>
> Jacob
>
 Going to try https://bugzilla.redhat.com/show_bug.cgi?id=1089130#c16 with
our applet.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140826/8f1f2795/attachment.html>


More information about the distro-pkg-dev mailing list