mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

vharseko
19.45.2023 0a96bf2261f45a16f9cbc9ee77ddcc12d95d0460
opendj-server-legacy/src/main/java/org/forgerock/opendj/reactive/LDAPConnectionHandler2.java
@@ -859,10 +859,10 @@
            final Set<String> protocols = config.getSSLProtocol();
            if (!protocols.isEmpty()) {
                sslEngine.setEnabledProtocols(protocols.toArray(new String[0]));
            } else { //enforce enable TLSv1.3 to avoid jdk 11 TLSv1.3 problem
            } else {
               String[] enabledProtocols = sslEngine.getEnabledProtocols();
               String[] enabledProtocolsNoTLSv13 = ArrayUtils.remove(enabledProtocols, "TLSv1.3");
               sslEngine.setEnabledProtocols(enabledProtocolsNoTLSv13);
//             String[] enabledProtocolsNoTLSv13 = ArrayUtils.remove(enabledProtocols, "TLSv1.3"); //enforce enable TLSv1.3 to avoid jdk 11 TLSv1.3 problem
               sslEngine.setEnabledProtocols(enabledProtocols);
            }
            final Set<String> ciphers = config.getSSLCipherSuite();