From 51eb644d1904470070fbab286377585633c10dc6 Mon Sep 17 00:00:00 2001 From: Junwei Zhao Date: Mon, 5 Nov 2018 12:07:29 +1100 Subject: [PATCH] Java some tip about SSL in java --- categories/java.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/categories/java.md b/categories/java.md index ed579c3..c3e7d82 100644 --- a/categories/java.md +++ b/categories/java.md @@ -178,3 +178,12 @@ In short no need add manual `finally` block to close resources. - A selector allows a single thread to handle multiple Channels - [http://tutorials.jenkov.com/java-nio/index.html](http://tutorials.jenkov.com/java-nio/index.html) + +### SSL + +#### Java use TLSv1.2 by default since Java 8 + +When you saw some error like this `SSL handshake exception: “Algorithm constraints check failed: MD5withRSA”`, probably you used `MD5` as message digest when generate a CA. You should regenerate a new CA using `sha1`, because the `MD5` has been found to be insecure. + +Some more info +