Back to bug 1302385

Who When What Removed Added
Deepak Bhole 2016-01-27 17:12:07 UTC CC dbhole
Deepak Bhole 2016-01-29 23:11:44 UTC Blocks 1297579
Iveta Wiedermann 2016-02-05 08:15:35 UTC CC isenfeld
Andrew John Hughes 2016-02-19 14:49:16 UTC Status ASSIGNED MODIFIED
Fixed In Version java-1.7.0-openjdk-1.7.0.95-2.6.4.2.el7
errata-xmlrpc 2016-02-19 20:30:10 UTC Status MODIFIED ON_QA
Libor Miksik 2016-03-01 17:43:57 UTC Blocks 1313485
Lukáš Zachar 2016-03-17 08:06:52 UTC QA Contact qe-baseos-apps lzachar
Robert Krátký 2016-04-12 10:54:46 UTC CC ahughes, rkratky
Docs Contact rkratky
Flags needinfo?(ahughes)
Andrew John Hughes 2016-04-12 16:16:44 UTC Flags needinfo?(ahughes)
Robert Krátký 2016-04-12 16:44:02 UTC Doc Text RC4 is now disabled by default in OpenJDK 6 and OpenJDK 7

Earlier _OpenJDK_ packages allowed the RC4 cryptographic algorithm to be used when making secure connections using Transport Layer Security (TLS). This algorithm is no longer secure, and so has been disabled in this release. To retain its use, it is necessary to revert to the earlier setting of the `jdk.tls.disabledAlgorithms` of `SSLv3, DH keySize < 768`. This can be done permanently in the `<java.home>/jre/lib/security/java.security` file or by adding the following line:

jdk.tls.disabledAlgorithms=SSLv3, DH keySize < 768

to a new text file and passing the location of that file to Java on the command line using the argument `-Djava.security.properties=<path to file>`.
Doc Type Bug Fix Release Note
John Skeoch 2016-05-05 04:42:13 UTC CC sbaiduzh oskutka
Ondrej Skutka 2016-05-09 14:31:59 UTC CC jvanek
Ondrej Skutka 2016-05-09 14:35:15 UTC CC oskutka
Robert Krátký 2016-08-21 15:52:23 UTC Doc Text RC4 is now disabled by default in OpenJDK 6 and OpenJDK 7

Earlier _OpenJDK_ packages allowed the RC4 cryptographic algorithm to be used when making secure connections using Transport Layer Security (TLS). This algorithm is no longer secure, and so has been disabled in this release. To retain its use, it is necessary to revert to the earlier setting of the `jdk.tls.disabledAlgorithms` of `SSLv3, DH keySize < 768`. This can be done permanently in the `<java.home>/jre/lib/security/java.security` file or by adding the following line:

jdk.tls.disabledAlgorithms=SSLv3, DH keySize < 768

to a new text file and passing the location of that file to Java on the command line using the argument `-Djava.security.properties=<path to file>`.
RC4 is now disabled by default in OpenJDK 6 and OpenJDK 7

Earlier _OpenJDK_ packages allowed the RC4 cryptographic algorithm to be used when making secure connections using Transport Layer Security (TLS). This algorithm is no longer secure, and it has been disabled in this release. To retain its use, it is necessary to revert to the earlier setting of the `jdk.tls.disabledAlgorithms` of `SSLv3, DH keySize < 768`. This can be done permanently in the `<java.home>/jre/lib/security/java.security` file or by adding the following line:

jdk.tls.disabledAlgorithms=SSLv3, DH keySize < 768

to a new text file and passing the location of that file to Java on the command line using the `-Djava.security.properties=<path to file>` argument.
Lukáš Zachar 2016-08-30 16:34:29 UTC Status ON_QA VERIFIED
errata-xmlrpc 2016-11-02 15:59:28 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-03 22:59:01 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-03 18:59:01 UTC

Back to bug 1302385