by

Switch to OpenJDK

最近正在把公司的 Orac$e JDK 1.8 換成 OpenJDK 1.8
換完之後, 
發現有個系統呼叫某個外部 HTTPS web services 
突然 handshake failure…

心頭一驚… 
然道 Orac$e JDK 偷藏一手?

經過一段時間 troubleshooting, 才發現… 
那個外部系統只支援 TLS 1.0 
而 JDK 8 到了 8u171 就 disable 了 3DES Cipher Suites 
進而影響了 TLS 1.0 的連線
https://bugs.openjdk.java.net/browse/JDK-8213846

這次升級是從 Orac$e JDK 8u144 升到 OpenJDK 8u191  所以撞到了這個問題…

解決方法是, 參考 8u144 修改 /jre/lib/security/java.security 檔案內的 jdk.tls.disabledAlgorithms 的 value
8u191 的 jdk.tls.disabledAlgorithms 的 value 原本是:
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
    EC keySize < 224, 3DES_EDE_CBC
修改成:
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \
    EC keySize < 224
改完測試後總算沒問題

Write a Comment

Comment

Webmentions

  • ts911betsoccer.com

    … [Trackback]

    […] Read More here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • idrpoker

    … [Trackback]

    […] Here you can find 52420 more Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • pasarqq

    … [Trackback]

    […] Info on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • How To Earn Easy Money Online (Real)

    … [Trackback]

    […] Find More on on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Escorts in Zanzibar

    … [Trackback]

    […] Information on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • orthopaedic pediatrics in atlanta ga

    … [Trackback]

    […] Find More on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Real Estate Broker West Bloomfield Michigan

    … [Trackback]

    […] Find More on on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • diretta

    … [Trackback]

    […] There you will find 36264 more Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Expand your social media presence

    … [Trackback]

    […] There you can find 68637 more Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Porsche giveaway

    … [Trackback]

    […] Read More Info here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Corgi Butt

    … [Trackback]

    […] Find More to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Tunikas große Größen

    … [Trackback]

    […] Read More Information here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Vegus

    … [Trackback]

    […] Info on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • didi promotion code

    … [Trackback]

    […] Here you will find 82359 more Information on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • RAP/DILM/HIP-HOP

    … [Trackback]

    […] Find More Info here on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • 188bet

    … [Trackback]

    […] Here you can find 27592 additional Information on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Telluride Powder

    … [Trackback]

    […] Find More here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • https://www.wolfpackcryptos.io

    … [Trackback]

    […] There you can find 6013 additional Information on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • making money from home

    … [Trackback]

    […] Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Ballet

    … [Trackback]

    […] Find More here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Stock Market Crashes Today Trade War and the Fed Gold Analysis

    … [Trackback]

    […] Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • layout

    … [Trackback]

    […] Here you will find 29950 more Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • informatii reale

    … [Trackback]

    […] There you can find 67906 more Information on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • คาสิโน

    … [Trackback]

    […] Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • bankruptcy appearance attorney san francisco

    … [Trackback]

    […] Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Digital Income System

    … [Trackback]

    […] Find More Info here on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Don Oscar's Cigars

    … [Trackback]

    […] Here you can find 63221 additional Information to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • didi referral code

    … [Trackback]

    […] Find More Info here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Detroit Michigan Homes For Sale Zillow

    … [Trackback]

    […] There you will find 26324 more Information to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • High Ticket Affiliate Marketing

    … [Trackback]

    […] Find More on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • dang ky tai khoan w88

    … [Trackback]

    […] There you will find 93116 more Information to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • empire market link

    … [Trackback]

    […] Here you can find 49698 more Info on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Make Money From Home

    … [Trackback]

    […] Info on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • discover here

    … [Trackback]

    […] Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • ultimate flat belly fix method

    … [Trackback]

    […] Find More to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • this contact form

    … [Trackback]

    […] Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • turntablism schallplatte dj clothing

    … [Trackback]

    […] Read More Info here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • United Medicare Advisors

    … [Trackback]

    […] There you can find 25823 additional Info on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Top Tallahassee Realtor

    … [Trackback]

    […] Read More on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • best real estate agent Tallahassee

    … [Trackback]

    […] Read More to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • trực tiếp bóng đá

    … [Trackback]

    […] Find More to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • dang ky fun88

    … [Trackback]

    […] Here you can find 68883 additional Information on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • ศัลยกรรม v line

    … [Trackback]

    […] There you can find 98940 additional Info to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • referral code

    … [Trackback]

    […] Read More Information here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • w88

    … [Trackback]

    […] Find More Info here to that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • Dentist in Thornton CO

    … [Trackback]

    […] Find More Info here on that Topic: jworks.idv.tw/blog/switch-to-openjdk/ […]

  • buy-backlink.net

    buy-backlink.net

    rqsyjycij niaho xqmszsl wtqg kbtgxschvwbqrco

    • Related Content by Tag