2.11 Disabling SSL Renegotiations

Perform the following steps to disable SSL renegotiations in Administration Console:

Linux:

  1. Open the /opt/novell/nam/adminconsole/conf/tomcat7.conf file.

  2. Ensure that the following lines exist:

    JAVA_OPTS="${JAVA_OPTS} -Dsun.security.ssl.allowUnsafeRenegotiation=false"
JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.rejectClientInitiatedRenegotiation=true"

Windows:

  1. Navigate to C:\Program Files (x86)\Novell\Tomcat\bin and then double-click tomcat7w.

  2. Under the Java tab, select the following options in Java Options:

    -Dsun.security.ssl.allowUnsafeRenegotiation=false"
    -Djdk.tls.rejectClientInitiatedRenegotiation=true"