Skip to content

Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors - #8979

Open
rzo1 wants to merge 1 commit into
masterfrom
fix/webapp-tls-cipher-exclusions
Open

Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors#8979
rzo1 wants to merge 1 commit into
masterfrom
fix/webapp-tls-cipher-exclusions

Conversation

@rzo1

@rzo1 rzo1 commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

setExcludeCipherSuites and setExcludeProtocols replace the factory's defaults, so the UI, Logviewer and DRPC HTTPS connectors kept only the two RC4 entries and SSLv3.

Switches to addExcludeCipherSuites/addExcludeProtocols and adds a test pinning the resulting exclusion set.

@rzo1 rzo1 added this to the 3.1.0 milestone Aug 19, 2026
@rzo1 rzo1 self-assigned this Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant