From 4aff00191f7d8ede39dfdcda703c61f33c5f000d Mon Sep 17 00:00:00 2001
From: James Moger <james.moger@gitblit.com>
Date: Tue, 04 Nov 2014 17:24:04 -0500
Subject: [PATCH] Exclude SSLv3 from Gitblit GO https protocols
---
src/main/java/com/gitblit/GitblitSslContextFactory.java | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/src/main/java/com/gitblit/GitblitSslContextFactory.java b/src/main/java/com/gitblit/GitblitSslContextFactory.java
index 9dd89b6..bda92af 100644
--- a/src/main/java/com/gitblit/GitblitSslContextFactory.java
+++ b/src/main/java/com/gitblit/GitblitSslContextFactory.java
@@ -54,6 +54,7 @@
setKeyStorePassword(storePassword);
setTrustStorePath(clientTrustStore.getAbsolutePath());
setTrustStorePassword(storePassword);
+ addExcludeProtocols("SSLv3");
logger.info(" keyStorePath = " + keyStore.getAbsolutePath());
logger.info(" trustStorePath = " + clientTrustStore.getAbsolutePath());
--
Gitblit v1.9.1