Some Java software I'm working on requires that we use a very old API that doesn't support TLS - it uses SSLv3. How could I access that endpoint without compromising the security of the rest of the program?

Currently for testing, I've simply edited the Java security config files so that SSLv3 is allowed, and this works. However, we don't want to do this, since it will compromise the security of the program. I want to isolate the use of SSLv3 to one single endpoint.

I can either build this into the Java code, or run some kind of proxy server that will do this, and point the Java code to my proxy.

Is there a simple, robust software solution to do this?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.