[Bug 57117] New: Increase the default cipher for HTTPS Test Script Recorder from SSLv3 to TLS

[bu...@apache.org]

https://issues.apache.org/bugzilla/show_bug.cgi?id=57117

            Bug ID: 57117
           Summary: Increase the default cipher for HTTPS Test Script
                    Recorder from SSLv3 to TLS
           Product: JMeter
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: HTTP
          Assignee: issues@jmeter.apache.org
          Reporter: milamber@apache.org

The default cipher for the HTTPS Test Script Recorder (JMeter's proxy) is
SSLv3. With the recent security issue (CVE-2014-3566) with this cipher, is
better to upgrade to TLS (like the current default cipher for HTTP sampler).

Reference:
POODLE: SSLv3 vulnerability (CVE-2014-3566)
https://access.redhat.com/articles/1232123

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 57117] Increase the default cipher for HTTPS Test Script Recorder from SSLv3 to TLS

[bu...@apache.org]

https://issues.apache.org/bugzilla/show_bug.cgi?id=57117

Milamber <mi...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Milamber <mi...@apache.org> ---


URL: http://svn.apache.org/r1632947
Log:
Increase the default cipher for HTTPS Test Script Recorder from SSLv3 to TLS
Edit the proxy.ssl.protocol property in jmeter.properties to return to SSLv3
Bugzilla Id: 57117

Modified:
    jmeter/trunk/bin/jmeter.properties
   
jmeter/trunk/src/protocol/http/org/apache/jmeter/protocol/http/proxy/Proxy.java
    jmeter/trunk/xdocs/changes.xml

-- 
You are receiving this mail because:
You are the assignee for the bug.