| | |
| | | final Set<String> protocols = config.getSSLProtocol(); |
| | | if (!protocols.isEmpty()) { |
| | | sslEngine.setEnabledProtocols(protocols.toArray(new String[0])); |
| | | } else { //enforce enable TLSv1.3 to avoid jdk 11 TLSv1.3 problem |
| | | } else { |
| | | String[] enabledProtocols = sslEngine.getEnabledProtocols(); |
| | | String[] enabledProtocolsNoTLSv13 = ArrayUtils.remove(enabledProtocols, "TLSv1.3"); |
| | | sslEngine.setEnabledProtocols(enabledProtocolsNoTLSv13); |
| | | // String[] enabledProtocolsNoTLSv13 = ArrayUtils.remove(enabledProtocols, "TLSv1.3"); //enforce enable TLSv1.3 to avoid jdk 11 TLSv1.3 problem |
| | | sslEngine.setEnabledProtocols(enabledProtocols); |
| | | } |
| | | |
| | | final Set<String> ciphers = config.getSSLCipherSuite(); |