Skip to content

Commit 4de544b

Browse files
authored
Merge pull request ibmruntimes#374 from JinhangZhang/disableDTLSv10
Disable DTLSv1.0 protocol in FIPS140-3 strict
2 parents 5db1640 + 171d7c6 commit 4de544b

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/java.base/share/conf/security/java.security

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -182,7 +182,7 @@ RestrictedSecurity.NSS.140-2.securerandom.algorithm = PKCS11
182182
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.name = OpenJCEPlusFIPS Cryptographic Module FIPS 140-3
183183
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.default = false
184184
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.fips = true
185-
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.hash = SHA256:dd19c8f8f2578cf400c11b5c7d003684cba5fc4999ac5c55d2a73099f70f9582
185+
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.hash = SHA256:4a85dc0db2f257388155b3ada7378773884edc89c80c8d715f4bdde84cc3d8bd
186186
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.number = Certificate #XXX
187187
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.policy = https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/
188188
RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.desc.sunsetDate = 2026-09-21
@@ -194,6 +194,7 @@ RestrictedSecurity.OpenJCEPlusFIPS.FIPS140-3.tls.disabledAlgorithms = \
194194
anon, \
195195
DES, \
196196
DH keySize < 2048, \
197+
DTLSv1.0, \
197198
EC keySize < 224, \
198199
ECDH, \
199200
MD5withRSA, \

0 commit comments

Comments
 (0)