smartdevicelink / sdl_core

SmartDeviceLink In-Vehicle Software and Sample HMI
BSD 3-Clause "New" or "Revised" License
240 stars 245 forks source link

Set secure wss cipher list #3885

Closed Jack-Byrne closed 2 years ago

Jack-Byrne commented 2 years ago

Fixes #3884

This PR is ready for review.

Risk

This PR makes no API changes.

Testing Plan

Connect cloud application using wss with a signed CA.cert

Summary

Sets the ssl context for wss connections to only use "hardened" cipher suites. This prevents the java server from using an insecure key exchange mechanism. Resolves the dh key length issue without reducing the operating systems security level.

CLA