3

I am using a java client application which runs on jdk 1.6_45.

When the client initiates an HTTPS connection, it sends an SSLv2Hello message even though I have configured -Dhttps.protocols=tlsv1 in java command line options.

My question is how do I disable the SSLv2Hello message (sending from client as part of handshake) from java command line options?

Michael Benjamin
  • 346,931
  • 104
  • 581
  • 701
Nishantha Pradeep
  • 87
  • 1
  • 1
  • 9
  • 1
    How are you creating the HTTPS connection? `-Dhttps.protocols` isn't universal and is ignored in some situations. – Johnny V Aug 07 '16 at 14:27
  • I am using Jetty as the client application (Jetty(7.6.7.v20120910)) – Nishantha Pradeep Aug 08 '16 at 04:39
  • Unless either Jetty or you use `HttpsURLConnection` to create the socket, `https.protocols` will have no effect. Jetty must have some other way of controlling this. – user207421 Aug 26 '16 at 03:24

0 Answers0