SSL/TLS HeartBleed vulnerability

StackOverflow https://stackoverflow.com/questions/22952658

Question

I am using Https and Tcp over SSL in java application with keystores and truststores. I use selfsigned certificates generated by java keytool. I am came to know about HeartBleed vulnerability with openSSL, do I need to change any implementation from java side or I am on safe side. can anyone please give details.

Was it helpful?

Solution

Java does not use OpenSSL, although some Java applications like Tomcat can. As you're using keystores and truststores, you must be using JSSE rather than OpenSSL.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top