13 Nov
2013
13 Nov
'13
6:49 p.m.
On 2013-11-04 18:12, Simner, John wrote:
To prevent man-in-the-middle attacks, the phone should be able to handle the fragmented TLS block when CBC protection is activated on the client tomcat server.
I have been unable to find the appropriate stunnel configuration item to support this.
Please could you inform me how this is handled through stunnel.
There is no option to *enable* CBC protection, as this is the default.
Use "options = DONT_INSERT_EMPTY_FRAGMENTS" to disable this secure default.
Mike