Open awilkins opened 8 years ago
Ok, this seems to be linked to the Java support for TLSv1.2 being disabled by default on my platform (Ubuntu 14.04.3 / OpenJDK7)
See : https://bugs.launchpad.net/ubuntu/+source/openjdk-7/+bug/1314113
The easiest way forward seems to be using JDK 8 or above.
This seems to be caused by my server being configured to only use the most secure available SSL implementation (TLSv1.2)
Not sure which bit of the code to attack, anyone with expertise in Apache Commons HttpClient would be welcome to try...