Skip to content

Commit cd8642a

Browse files
Ian CraggsGerrit Code Review @ Eclipse.org
authored andcommitted
Merge "Bug: 476863 - Android Service is limited to SSL 3.0 I've set the SSL/TLS version to TLSv1. This is an immediate improvement over the very insecure SSLv1 that was previously allowed. This should allow TLSv1 TLSV1.1 and TLSv1.2 Signed-off-by: James Sutton <james.sutton@uk.ibm.com>" into develop
2 parents 51d9185 + 450c508 commit cd8642a

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

  • org.eclipse.paho.android.service/org.eclipse.paho.android.service/src/main/java/org/eclipse/paho/android/service

org.eclipse.paho.android.service/org.eclipse.paho.android.service/src/main/java/org/eclipse/paho/android/service/MqttAndroidClient.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1667,7 +1667,7 @@ public SSLSocketFactory getSSLSocketFactory (InputStream keyStore, String passwo
16671667
TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");
16681668
tmf.init(ts);
16691669
TrustManager[] tm = tmf.getTrustManagers();
1670-
ctx = SSLContext.getInstance("SSL");
1670+
ctx = SSLContext.getInstance("TLSv1");
16711671
ctx.init(null, tm, null);
16721672

16731673
sslSockFactory=ctx.getSocketFactory();

0 commit comments

Comments
 (0)