1. Upgrade JDK to 1.8
2. jetty-ssl.xml
<?xml version="1.0"?> <!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure.dtd"> <!-- =============================================================== --> <!-- Configure SSL for the Jetty Server --> <!-- this configuration file should be used in combination with --> <!-- other configuration files. e.g. --> <!-- java -jar start.jar etc/jetty-ssl.xml --> <!-- --> <!-- alternately, add to the start.ini for easier usage --> <!-- =============================================================== --> <Configure id="Server" class="org.eclipse.jetty.server.Server"> <!-- if NIO is not available, use org.eclipse.jetty.server.ssl.SslSocketConnector --> <New id="sslContextFactory" class="org.eclipse.jetty.http.ssl.SslContextFactory"> <Set name="KeyStore"><Property name="jetty.home" default="." />/etc/keystore-2015</Set> <Set name="KeyStorePassword">OBF:1wua1u9d1vgv1l1g1wgi1xmk1xmq1wfg1kxm1vfz1uaxxxxxx</Set> <Set name="KeyManagerPassword">OBF:1wua1u9d1vgv1l1g1wgi1xmk1xmq1wfg1kxm1vfz1uaxxxxxx</Set> <Set name="TrustStore"><Property name="jetty.home" default="." />/etc/keystore-2015</Set> <Set name="TrustStorePassword">OBF:1wua1u9d1vgv1l1g1wgi1xmk1xmq1wfg1kxm1vfz1uaxxxxxxxx</Set> <!-- <Set name="IncludeCipherSuites"> <Array type="String"> <Item>TLS_DHE_RSA.*</Item> <Item>TLS_ECDHE.*</Item> </Array> </Set>--> <Set name="ExcludeCipherSuites"> <Array type="String"> <Item>.*NULL.*</Item> <Item>.*RC4.*</Item> <Item>.*MD5.*</Item> <Item>.*DES.*</Item> <Item>.*DSS.*</Item> </Array> </Set> <Set name="ExcludeProtocols"> <Array type="java.lang.String"> <Item>SSLv3</Item> </Array> </Set> </New> <Call name="addConnector"> <Arg> <New class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector"> <Arg><Ref id="sslContextFactory" /></Arg> <Set name="Port">443</Set> <Set name="maxIdleTime">30000</Set> <Set name="Acceptors">2</Set> <Set name="AcceptQueueSize">100</Set> </New> </Arg> </Call> </Configure>
3. add System Property -Djdk.tls.ephemeralDHKeySize=2048
4. test it https://www.ssllabs.com/ssltest/index.html
info:
http://www.openssl.org/docs/apps/ciphers.html
BTW: jetty OBF password
@echo off call cd /d %~dp0 echo %JAVA_8% call "%JAVA_8%\bin\java" -cp jetty-http-9.3.0.v20150612.jar;jetty-util-9.3.0.v20150612.jar org.eclipse.jetty.util.security.Password PASSWORD pause
相关推荐
执行 bash upgrade_ssl_ssh.sh 进行安装 注意,升级安装后,确保sshd服务正常,请新开终端进行验证测试 验证 openssl版本: openssl version OpenSSL 1.1.1w 11 Sep 2023 openssh版本: ssh -V OpenSSH_9.6p1, ...
特点: 1、同时升级openssh与openssl,...执行 bash upgrade_ssl_ssh.sh 进行安装 验证 openssl版本: openssl version OpenSSL 1.1.1w 11 Sep 2023 openssh版本: ssh -V OpenSSH_9.5p1, OpenSSL 1.1.1w 11 Sep 2023
执行 bash upgrade_ssl_ssh.sh 进行安装 验证: openssh 版本: (已带有openssl版本) [root@localhost ~]# ssh -V OpenSSH_9.3p1, OpenSSL 1.1.1u 30 May 2023 openssh 版本: [root@localhost ~]# openssl ...
执行 bash upgrade_ssl_ssh.sh 进行安装 注意,升级安装后,确保sshd服务正常,请新开终端进行验证测试 验证 openssl版本: openssl version OpenSSL 1.1.1w 11 Sep 2023 openssh版本: ssh -V OpenSSH_9.7p1, ...
Windows10Upgrade9252.zip
特点: 1、同时升级openssh与openssl,...执行 bash upgrade_ssl_ssh.sh 进行安装 验证 openssl版本: openssl version OpenSSL 1.1.1w 11 Sep 2023 openssh版本: ssh -V OpenSSH_9.4p1, OpenSSL 1.1.1w 11 Sep 2023
特点: 1、同时升级openssh与openssl,...执行 bash upgrade_ssl_ssh.sh 进行安装 验证 openssl版本: openssl version OpenSSL 1.1.1v 1 Aug 2023 openssh版本: ssh -V OpenSSH_9.4p1, OpenSSL 1.1.1v 1 Aug 2023
upgrade文件
中兴B860AV2.1-T刷机固件包,下载固件 a ml_upgrade_package.img 本人花钱购买学习测试有效
Official Oracle upgrade 11g R2 upgrade guide
RK27Upgrade_v2.6.4
特点: 1、同时升级openssh与openssl,...执行 bash upgrade_ssl_ssh.sh 进行安装 验证 openssl版本: openssl version OpenSSL 1.1.1u 30 May 2023 openssh版本: ssh -V OpenSSH_9.3p2, OpenSSL 1.1.1u 30 May 2023
rockchip linux刷机工具upgrade_tool
RK27Upgrade_v2.5(Single)
Visual Basic Upgrade Companion
Windows 7 Upgrade Advisor Windwos 7 升级检测建议
特点: 1、同时升级openssh与openssl,采用rpm包形式,一键快速升级版本,无需每台单独再次进行编译, 2、隐藏openssh-版本号 ... 运行upgrade_ssl_ssh.sh文件 运行完成后输入:ssh -V 然后就会显示出版本号
目前centos6已经停止更新,rehdat提供了centos6升级至centos7的工具,一般网络下载速度感人,此资源包含升级所需的preupgrade-assistant、preupgrade-assistant-contents、preupgrade-assistant-ui、redhat-upgrade-...
安装openssl-fisp,openssl,openssh运行upgrade_ssh.zip支持在线更新多种版本centos的OpenSSL的shell程序解读
-On ST-Link V2, upgrade firmware to V2.J27.S6, -需要其他版本请关注我