UPD: disable SSLv3

diff --git a/src/org/cacert/gigi/Launcher.java b/src/org/cacert/gigi/Launcher.java
index 177d63eed5925b18bed89a27e873990af3ac2d6e..0490d1b1f1bf20609c494b5a2863e30e018d3b83 100644 (file)
--- a/src/org/cacert/gigi/Launcher.java
+++ b/src/org/cacert/gigi/Launcher.java
@@ -264,6 +264,7 @@ public class Launcher {
         scf.setRenegotiationAllowed(false);
 
         scf.setProtocol("TLS");
         scf.setRenegotiationAllowed(false);
 
         scf.setProtocol("TLS");

+        scf.setIncludeProtocols("TLSv1", "TLSv1.1", "TLSv1.2");

         scf.setTrustStore(conf.getTrustStore());
         KeyStore privateStore = conf.getPrivateStore();
         scf.setKeyStorePassword(conf.getPrivateStorePw());
         scf.setTrustStore(conf.getTrustStore());
         KeyStore privateStore = conf.getPrivateStore();
         scf.setKeyStorePassword(conf.getPrivateStorePw());