5.2 Disabling SSL Renegotiations

You should disable SSL renegotiation as it is vulnerable to the man-in-the-middle attacks.

Perform the following steps to disable SSL renegotiations in Analytics Server:

  1. Open the /opt/novell/nam/dashboard/conf/tomcat.conf file.

  2. Ensure that the following lines exist:

    JAVA_OPTS="${JAVA_OPTS} -Dsun.security.ssl.allowUnsafeRenegotiation=false"
    JAVA_OPTS="${JAVA_OPTS} -Djdk.tls.rejectClientInitiatedRenegotiation=true"