Re: [CentOS] Java SSLv3 status on CentOS-6.6

2015-03-12 Thread Jonathan Billings
On Wed, Mar 11, 2015 at 12:03:01PM -0400, James B. Byrne wrote: > Can anyone inform me as to whether or not Java on CentOS-6.6 still has > SSLv3 enabled? And if it does then how is it disabled? According to these updates for openjdk java: java-1.6.0-openjdk https://rhn.redhat.com/errata/RHSA-201

Re: [CentOS] Java SSLv3 status on CentOS-6.6

2015-03-12 Thread James B. Byrne
On Wed, March 11, 2015 13:46, Grant McChesney wrote: > On Wed, Mar 11, 2015 at 10:03 AM, James B. Byrne > > wrote: > >> Can anyone inform me as to whether or not Java on CentOS-6.6 still >> has SSLv3 enabled? And if it does then how is it disabled? >> >> > James: > > Check the java.security file

Re: [CentOS] Java SSLv3 status on CentOS-6.6

2015-03-11 Thread Fernando Cassia
On Wed, Mar 11, 2015 at 1:03 PM, James B. Byrne wrote: > Can anyone inform me as to whether or not Java on CentOS-6.6 still has > SSLv3 enabled? And if it does then how is it disabled? > If you're using Oracle JRE / JDK previous to 8u31 here are instructions on how to disable SSLv3 http://www.o

Re: [CentOS] Java SSLv3 status on CentOS-6.6

2015-03-11 Thread Grant McChesney
On Wed, Mar 11, 2015 at 10:03 AM, James B. Byrne wrote: > Can anyone inform me as to whether or not Java on CentOS-6.6 still has > SSLv3 enabled? And if it does then how is it disabled? > > James: Check the java.security file for your JRE. I'm running OpenJDK 8 on Cent 6.6 and it's located at