Skip to content

Commit 450c508

Browse files
committed
Bug: 476863 - Android Service is limited to SSL 3.0
I've set the SSL/TLS version to TLSv1. This is an immediate improvement over the very insecure SSLv1 that was previously allowed. This should allow TLSv1 TLSV1.1 and TLSv1.2 Signed-off-by: James Sutton <james.sutton@uk.ibm.com>
1 parent 2bd8b12 commit 450c508

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

  • org.eclipse.paho.android.service/org.eclipse.paho.android.service/src/main/java/org/eclipse/paho/android/service

org.eclipse.paho.android.service/org.eclipse.paho.android.service/src/main/java/org/eclipse/paho/android/service/MqttAndroidClient.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1667,7 +1667,7 @@ public SSLSocketFactory getSSLSocketFactory (InputStream keyStore, String passwo
16671667
TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");
16681668
tmf.init(ts);
16691669
TrustManager[] tm = tmf.getTrustManagers();
1670-
ctx = SSLContext.getInstance("SSL");
1670+
ctx = SSLContext.getInstance("TLSv1");
16711671
ctx.init(null, tm, null);
16721672

16731673
sslSockFactory=ctx.getSocketFactory();

0 commit comments

Comments
 (0)