<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div><blockquote type="cite" class=""><div class="">On 2019-10-16, at 15:37, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 10/16/19, 10:34 AM, "dev on behalf of Ian Young" <<a href="mailto:dev-bounces@shibboleth.net" class="">dev-bounces@shibboleth.net</a> on behalf of <a href="mailto:ian@iay.org.uk" class="">ian@iay.org.uk</a>> wrote:<br class=""><br class=""><blockquote type="cite" class="">* TLS 1.0 and TLS 1.1 being *disabled* in all versions of Java from Java 7 onwards, second half of 2020. This is new and<br class="">will presumably affect existing deployments if they take the relevant Java update (which I have to assume a lot of people<br class="">will).<br class=""></blockquote><br class="">As in "removed" or just a default policy rule that can be overridden to turn them back on?<br class=""></div></div></blockquote><div><br class=""></div><div>They say disabled rather than removed, so I guess there might be a way to turn it back on. Might require editing java.security though (that's how they suggest testing disabling them).</div><div><br class=""></div><blockquote type="cite" class=""><div class=""><div class="">I broke a bunch of Red Hat <mumble> systems by turning off TLS 1.1 on my Jetty servers where I host my metadata locally so this would be a big deal if not revocable.<br class=""></div></div></blockquote><div><br class=""></div><div>Ugh. When did RHEL add support for 1.2? RHEL 6 or was it 7?</div><div><br class=""></div><div>I got this via a tweet by Sean Mullan, might be worth asking him directly.</div></div><div class="">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div class=""><span class="Apple-tab-span" style="white-space: pre;"><br class="Apple-interchange-newline"></span> -- Ian<br class=""></div><div class=""><span class="Apple-style-span" style="font-size: medium;"><br class=""></span></div></span></div></span><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>