How to disable SSLv3 protocol in Apache ActiveMQ?

Question

I want to disable SSLv3 protocol in Apache ActiveMQ.

Can not find relevant information here: http://activemq.apache.org/ssl-transport-reference.html

The link above only shows how to configure CipherSuites

Answer 1

There is an enabledProtocols option you can use on the transport connector. You can't exclude, but you can choose valid protocols.

transport.enabledProtocols=<comma separated list of SSL/TLS protocols>

So, a TLS only "default" transport connector should look like this:

<transportConnector name="ssl" uri="ssl://0.0.0.0:61618?transport.enabledProtocols=TLSv1,TLSv1.1,TLSv1.2&amp;maximumConnections=1000&amp;wireFormat.maxFrameSize=104857600"/>