Changeset 13679 in josm for trunk/src/org

Timestamp:

2018-04-25T01:22:02+02:00 (7 years ago)

Author:

Don-vip

Message:

sonar - squid:S4423 - Weak SSLContexts should not be used

Location:

trunk/src/org/openstreetmap/josm/io

Files:

• CertificateAmendment.java (modified) (1 diff)
• remotecontrol/RemoteControlHttpsServer.java (modified) (1 diff)

trunk/src/org/openstreetmap/josm/io/CertificateAmendment.java

@@ -229 +229 @@
             TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
             tmf.init(keyStore);
-            SSLContext sslContext = SSLContext.getInstance("TLS");
+            SSLContext sslContext = SSLContext.getInstance("TLSv1.2");
             sslContext.init(null, tmf.getTrustManagers(), null);
             SSLContext.setDefault(sslContext);

trunk/src/org/openstreetmap/josm/io/remotecontrol/RemoteControlHttpsServer.java

@@ -277 +277 @@
         tmf.init(ks);
 
-        sslContext = SSLContext.getInstance("TLS");
+        sslContext = SSLContext.getInstance("TLSv1.2");
         sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);