[jetty-dev] server with jetty 9.4.2 no longer accessible from iPhone

[Michele Rossi <michele.rossi@xxxxxxxxx>]

hi all,

I have recently upgraded our system to the latest Jetty - 9.4.2 - finding that it's no longer possible to connect from an iPhone.

That happens with Safari, Chrome and Firefox (all on their respective latest versions).

From the error message I could tell that the problem is the negotiation of available SSL ciphers.

What has changed in 9.4.X in that area?

And how do I find Jetty changelogs? I have clicked around a while but I had no luck (sorry).

My ssl-tweak file looks like this:

<Configure id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">

<Set name="ExcludeCipherSuites">

<Array type="String">

<Item>.*NULL.*</Item>

<Item>.*anon.*</Item>

</Array>

</Set>

<Set name="ExcludeProtocols">

<Array type="java.lang.String">

<Item>SSL</Item>

<Item>SSLv3</Item>

<Item>SSLv2</Item>

</Array>

</Set>

</Configure>

thanks,

Michele