Disabling TLS 1.1 with Jetty 9.4

[Cantor, Scott]

On 7/6/21, 1:58 PM, "users on behalf of Brent Goebel" <users-bounces at shibboleth.net on behalf of Brent.Goebel at du.edu> wrote:

>    Thanks Scott. We are on version "11.0.11" of Java on our Shibboleth IdP. 

Then either you enabled TLS in the Java security file or you are confused about your architecture. Nothing on that Java version will allow TLS < 1.2 by default.

>    Any other suggestions or can someone please share the configuration and changes they made to Jetty 9.4 to
> exclude TLS 1.0 & 1.1?

They're in the wiki.

I very much doubt you're talking to what you think you are when you're testing.

-- Scott