Erasure5959 3d9eb434b8

Disable Secure Client-Initiated Renegotiation by default ...

The parameter  -Djdk.tls.rejectClientInitiatedRenegotiation=true disables Secure Client-Initiated Renegotiation in Keycloak to resolve a potential DoS vulnerability. Note this is applicable only to TLS 1.2.

Closes #43020

Signed-off-by: Erasure5959 <154384607+Erasure5959@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>

2025-10-01 14:35:29 +00:00

..

src/main

Disable Secure Client-Initiated Renegotiation by default

2025-10-01 14:35:29 +00:00

assembly.xml

feature: add option for creating a global truststore (#24473)

2023-11-30 08:57:17 +01:00

check-dev-dependencies.sh

Additional Quarkus devtools dependencies in distribution (#40458)

2025-06-19 11:11:15 +02:00

pom.xml

Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822)

2025-08-12 16:50:17 +02:00