3.11 Disabling SSL Renegotiations

Perform the following steps to disable SSL renegotiations in Identity Server:

  1. Open the /opt/novell/nam/idp/conf/tomcat.conf file.

  2. Ensure that the following lines exist:

    JAVA_OPTS="${JAVA_OPTS} -Dsun.security.ssl.allowUnsafeRenegotiation=false"
JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.rejectClientInitiatedRenegotiation=true"