PAYARA-2086 Secure Client-Initiated Renegotiation cannot be disabled (#…

…1974)
payara · Sep 16, 2017 · 58a61da · 58a61da
1 parent 75b012f
commit 58a61da
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nucleus/admin/template/src/main/resources/config/domain.xml b/nucleus/admin/template/src/main/resources/config/domain.xml
@@ -196,6 +196,7 @@
         <jvm-options>-Dfelix.fileinstall.disableConfigSave=false</jvm-options>
         <!-- End of OSGi bundle configurations -->
         <jvm-options>-XX:NewRatio=2</jvm-options>
+        <jvm-options>-Djdk.tls.rejectClientInitiatedRenegotiation=true</jvm-options>
       </java-config>
       <network-config>
         <protocols>
@@ -343,6 +344,7 @@
              -->
              <jvm-options>-Dfelix.fileinstall.disableConfigSave=false</jvm-options>
              <!-- End of OSGi bundle configurations -->
+             <jvm-options>-Djdk.tls.rejectClientInitiatedRenegotiation=true</jvm-options>
          </java-config>
          <availability-service/>
          <network-config>