https://answers.axonivy.com/questions/1923/disabling-sslv3-and-sslv2-in-engine<p>Hi there</p> <p>How can I disable less secure encryption methods and use only TLS within the ivy engine?</p> <p>Thanks for your feedback, Sven</p>enTue, 13 Sep 2016 09:55:07 -0400https://answers.axonivy.com/questions/1923/disabling-sslv3-and-sslv2-in-engine/2024<p>Hi there</p> <p>is there a possibility to change the enabled ssl protocols?</p> <blockquote> <p>To disable SSL v3, and enable all TLS protocols on JSSE connectors add the following attributes to your HTTPS connector configuration in server.xml:</p> <p>sslProtocol="TLS" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1"</p> </blockquote> <p>Information here: <a href="https://wiki.apache.org/tomcat/Security/POODLE">https://wiki.apache.org/tomcat/Security/POODLE</a></p> <p>Thanks</p>skilchenmannTue, 13 Sep 2016 09:55:07 -0400https://answers.axonivy.com/questions/1923/disabling-sslv3-and-sslv2-in-engine/2024https://answers.axonivy.com/questions/1923/disabling-sslv3-and-sslv2-in-engine/1934<p>Only TLS should be enabled by default anyway. See System Property "WebServer.HTTPS.SslProtocol", it is set to TLS by default.</p> <p>See <a href="http://developer.axonivy.com/doc/latest/EngineGuideHtml/administration.html#administration-systemproperties">System Properties</a> in the Engine Guide to learn more about it.</p>Christian StrebelWed, 03 Aug 2016 11:15:29 -0400https://answers.axonivy.com/questions/1923/disabling-sslv3-and-sslv2-in-engine/1934