JOnAS 4.10.9 Tomcat 5.5.28 : TLS SSL Man In The Middle CVE-2009-3555
| Newsgroups | gmane.comp.java.objectweb.jonas |
|---|---|
| Message-ID | <[email protected]> |
Hi ! For some times now I notice the following information message in the error console of Mozilla Firefox : <my server> : server does not support RFC 5746, see CVE-2009-3555 This problem is ssl related and It seems (see link) that a workaround is implemented in Tomcat 5.5.29 and up : http://tomcat.apache.org/security-5.html --> TLS SSL Man In The Middle CVE-2009-3555 JOnAS 4.10.9 is actually bundled with Tomcat 5.5.28. Is a Tomcat version upgrade for JOnAS 4.x planned ? Thanks.