[jira] [Work started] (CAMEL-25104) camel-core - SSLContextParameters should use TLSv1.2 as minimum protocol by default

["Claus Ibsen (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CAMEL-25104?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on CAMEL-25104 started by Claus Ibsen.
-------------------------------------------
> camel-core - SSLContextParameters should use TLSv1.2 as minimum protocol by default
> -----------------------------------------------------------------------------------
>
>                 Key: CAMEL-25104
>                 URL: https://issues.apache.org/jira/browse/CAMEL-25104
>             Project: Camel
>          Issue Type: Improvement
>          Components: camel-core
>            Reporter: Claus Ibsen
>            Assignee: Claus Ibsen
>            Priority: Major
>
> The default filters of {{SSLContextParameters}} should use TLSv1.2 as the minimum protocol:
> * The default secure socket protocols filter only excludes {{SSL.*}}, so {{TLSv1}} and {{TLSv1.1}} are allowed.
> * For an {{SSLServerSocket}} the default filters are applied over all the supported protocols and cipher suites (while an {{SSLSocket}} and {{SSLEngine}} use the default enabled ones of the JVM), so a server socket created from the default SSLContextParameters enables {{TLSv1}} and {{TLSv1.1}} (e.g. {{[TLSv1.3, TLSv1.2, TLSv1.1, TLSv1]}} on JDK 21/25), unless they are disabled in the JVM security configuration.
> * The default cipher suites filter excludes {{.*_DES_.*}} which does not match the {{3DES}} cipher suites.
> The default protocols filter now excludes {{TLSv1}} and {{TLSv1.1}}, the default cipher suites filter excludes {{.*_3DES_.*}}, and the server socket uses the default enabled protocols and cipher suites of the JVM as the other types do. An older protocol can still be configured explicitly.
> _Claude Code on behalf of Claus Ibsen_



--
This message was sent by Atlassian Jira
(v8.20.10#820010)