Serviio

Hi.
3DES ciphers are known to be vulnerable to SWEET32.
Is there any way to configure ciphers for Serviio?

The actual openssl names of the vulnerable modes:
ECDHE-RSA-DES-CBC3-SHA (3DES-CBC w/ SHA1 and ECDH kx)
DES-CBC3-SHA (3DES-CBC w/ SHA1 and RSA kx)
EDH-RSA-DES-CBC3-SHA (3DES-CBC w/ SHA1 and DH kx)


More info on sweet32:
https://sweet32.info/
https://www.openssl.org/blog/blog/2016/08/24/sweet32/

Ok, you'll need to add something like '-Djava.security.properties==/home/pc5dczcbl5yt/java.security' (note double ==) to serviio JAVA_OPTS.
Then copy default java security file (jre/lib/security/java.security) and update some options.

I've updated:
jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 2048, DSA keySize < 1024, EC keySize < 224
jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 2048, DESede, DH_RSA, CBC, SHA-1, SHA-224
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, EC keySize < 224, TLSv1, DH_RSA, CBC, SHA-1, SHA-224
jdk.tls.legacyAlgorithms=


Hope it helps somebody

awesome, thanks