SSL / TLS HeartBleed Vulnerability

I use Https and Tcp over SSL in a Java application with key stores and trusted stores. I use self-signed certificates created by java keytool. I learned about the HeartBleed vulnerability with openSSL, I need to change any implementation from the java side, or I'm safe. anyone can provide details.

+4
source share
1 answer

Java does not use OpenSSL, although some Java applications, such as Tomcat, may. Since you use key stores and trust databases, you should use JSSE, not OpenSSL.

+6
source

Source: https://habr.com/ru/post/1535673/


All Articles