Disabling TLS Renegotiation

Integration Server 10.15 | Integration Server Administrator's Guide | Configuring Integration Server for Secure Communications | Supported SSL/TLS Protocols | Disabling TLS Renegotiation

TLS renegotiation can lead to Denial of Service (DoS) attacks. You can disable TLS renegotiation for all HTTPS and FTPS ports that use JSSE by setting a Java system property. The property that you configure depends on the JSSE provider in the JDK used by Integration Server.

When using the JSSE provider from Oracle (SunJSSE), set the following Java system property to true to disable TLS renegotiation: jdk.tls.rejectClientInitiatedRenegotiation

When using the JSSE provider from IBM (IBM JSSE2), use the following Java system property to disable TLS renegotiation: com.ibm.jsse2.renegotiate