漏洞验证详细描述解决办法验证方法SSL状态检测网络安全2021必备资料&渗透测试&面试其实这个漏洞原理我也没怎么看明白，原理及详细介绍请看文末的链接。详细描述该漏洞是由功能较弱而且已经过时的RC4加密算法中一个问题所导致的。它能够在某些情况下泄露SSL/TLS加密流量中的密文，从而将账户用户名密码、信用卡数据和其他敏感信息泄露给黑客。解决办法1、服务器端禁止使用RC4加密算法。 ....

文章 2015-10-22 来自：开发者社区

SSL/TLS Bar Mitzvah Attack 漏洞 [ 受诫礼(BAR-MITZVAH) ]

关于SSL/TLS最新漏洞“受戒礼”初步报告文章： http://www.freebuf.com/articles/network/62442.html 做了详细的说明。我的业务服务器为Tomcat ，按文中所说的方法增加配置并没有解决问题。然后我对配置做了简单删减后，问题解决。说明如下：对文中所说的 server.xml 中SSL connector 加入的内容： S...

共有7条

< 1 >

跳转至： GO

更新时间 2023-01-16 11:45:54

本页面内关键词为智能算法引擎基于机器学习所生成，如有任何问题，可在页面下方点击"联系我们"与我们沟通。

SSL您可能感兴趣

产品推荐

{"moduleinfo":{"card_count":[{"count_phone":1,"count":1}],"search_count":[{"count_phone":4,"count":4}]},"card":[{"des":"阿里云数据库专家保驾护航，为用户的数据库应用系统进行性能和风险评估，参与配合进行数据压测演练，提供数据库优化方面专业建议，在业务高峰期与用户共同保障数据库系统平稳运行。","link1":"https://www.aliyun.com/service/optimization/database","link":"https://www.aliyun.com/service/chiefexpert/database","icon":"https://img.alicdn.com/tfs/TB1a5ZfonnI8KJjy0FfXXcdoVXa-100-100.png","btn2":"数据库紧急救援服务","tip":"还有更多专家帮助您解决云上业务问题：<a href=\"https://www.aliyun.com/service/list#f4\" target=\"_blank\">立即查看</a>","btn1":"云上数据库优化服务","link2":"https://www.aliyun.com/service/databaserescue","title":"数据库专家服务"}],"search":[{"txt":"安全首席专家","link":"https://www.aliyun.com/service/chiefexpert/security"},{"txt":"中间件首席专家","link":"https://www.aliyun.com/service/chiefexpert/middleware"},{"txt":"系统与平台首席专家","link":"https://www.aliyun.com/service/chiefexpert/platform"},{"txt":"存储首席专家","link":"https://www.aliyun.com/service/chiefexpert/storage"}],"countinfo":{"search":{"length_pc":0,"length":0},"card":{"length_pc":0,"length":0}},"simplifiedDisplay":"newEdition","newCard":[{"link":"https://www.aliyun.com/product/security/markets/aliyun/product/cas","icon":"cas","contentLink":"https://www.aliyun.com/product/security/markets/aliyun/product/cas","title":"数字证书管理服务（原SSL证书）","des":"数字证书管理服务集云上SSL证书生命周期管理和数字证书应用为一体的SAAS服务。该服务具备签发、管理服务器证书和各类终端证书的能力，同时提供云上证书自动化应用部署的解决方案，便于客户轻松实现数据传输加密和信源加密。","btn1":"立即购买","link1":"https://yundun.console.aliyun.com/?p=cas&showBuy=1#/certExtend/buy","btn2":"管理控制台","link2":"https://yundunnext.console.aliyun.com/?p=cas#/overview/cn-hangzhou","btn3":"售前/售后人工服务","link3":"https://yundun.console.aliyun.com/?p=cas&showDingGroup=true#/overview","infoGroup":[{"infoName":"新老同享","infoContent":{"firstContentName":"首购4折起/新购85折起","firstContentLink":"https://www.aliyun.com/ntms/act/sslbuy?utm_content=se_1014363149","lastContentName":"","lastContentLink":""}},{"infoName":"多云部署","infoContent":{"firstContentName":"支持跨云产品任务部署","firstContentLink":"https://help.aliyun.com/zh/ssl-certificate/user-guide/deploy-ssl-certificates-to-multi-cloud-services?spm=a2c4g.11174283.0.0.4b484c27TH4szF"}},{"infoName":"热点商品","infoContent":{"firstContentName":"HTTPS加速网关9.9元起","firstContentLink":"https://www.aliyun.com/product/security/cas/https_gateway"}},{"infoName":"用户指南","infoContent":{"firstContentName":"查看产品文档","firstContentLink":"https://help.aliyun.com/zh/ssl-certificate/"}}]}],"visual":{"textColor":"dark","topbg":""}}

{"$env":{"JSON":{}},"$page":{"env":"production"},"$context":{"moduleinfo":{"card_count":[{"count_phone":1,"count":1}],"search_count":[{"count_phone":4,"count":4}]},"card":[{"des":"阿里云数据库专家保驾护航，为用户的数据库应用系统进行性能和风险评估，参与配合进行数据压测演练，提供数据库优化方面专业建议，在业务高峰期与用户共同保障数据库系统平稳运行。","link1":"https://www.aliyun.com/service/optimization/database","link":"https://www.aliyun.com/service/chiefexpert/database","icon":"https://img.alicdn.com/tfs/TB1a5ZfonnI8KJjy0FfXXcdoVXa-100-100.png","btn2":"数据库紧急救援服务","tip":"还有更多专家帮助您解决云上业务问题：<a href=\"https://www.aliyun.com/service/list#f4\" target=\"_blank\">立即查看</a>","btn1":"云上数据库优化服务","link2":"https://www.aliyun.com/service/databaserescue","title":"数据库专家服务"}],"search":[{"txt":"安全首席专家","link":"https://www.aliyun.com/service/chiefexpert/security"},{"txt":"中间件首席专家","link":"https://www.aliyun.com/service/chiefexpert/middleware"},{"txt":"系统与平台首席专家","link":"https://www.aliyun.com/service/chiefexpert/platform"},{"txt":"存储首席专家","link":"https://www.aliyun.com/service/chiefexpert/storage"}],"countinfo":{"search":{"length_pc":0,"length":0},"card":{"length_pc":0,"length":0}},"simplifiedDisplay":"newEdition","newCard":[{"link":"https://www.aliyun.com/product/security/markets/aliyun/product/cas","icon":"cas","contentLink":"https://www.aliyun.com/product/security/markets/aliyun/product/cas","title":"数字证书管理服务（原SSL证书）","des":"数字证书管理服务集云上SSL证书生命周期管理和数字证书应用为一体的SAAS服务。该服务具备签发、管理服务器证书和各类终端证书的能力，同时提供云上证书自动化应用部署的解决方案，便于客户轻松实现数据传输加密和信源加密。","btn1":"立即购买","link1":"https://yundun.console.aliyun.com/?p=cas&showBuy=1#/certExtend/buy","btn2":"管理控制台","link2":"https://yundunnext.console.aliyun.com/?p=cas#/overview/cn-hangzhou","btn3":"售前/售后人工服务","link3":"https://yundun.console.aliyun.com/?p=cas&showDingGroup=true#/overview","infoGroup":[{"infoName":"新老同享","infoContent":{"firstContentName":"首购4折起/新购85折起","firstContentLink":"https://www.aliyun.com/ntms/act/sslbuy?utm_content=se_1014363149","lastContentName":"","lastContentLink":""}},{"infoName":"多云部署","infoContent":{"firstContentName":"支持跨云产品任务部署","firstContentLink":"https://help.aliyun.com/zh/ssl-certificate/user-guide/deploy-ssl-certificates-to-multi-cloud-services?spm=a2c4g.11174283.0.0.4b484c27TH4szF"}},{"infoName":"热点商品","infoContent":{"firstContentName":"HTTPS加速网关9.9元起","firstContentLink":"https://www.aliyun.com/product/security/cas/https_gateway"}},{"infoName":"用户指南","infoContent":{"firstContentName":"查看产品文档","firstContentLink":"https://help.aliyun.com/zh/ssl-certificate/"}}]}],"visual":{"textColor":"dark","topbg":""}}}

数字证书管理服务（原SSL证书）

数字证书管理服务集云上SSL证书生命周期管理和数字证书应用为一体的SAAS服务。该服务具备签发、管理服务器证书和各类终端证书的能力，同时提供云上证书自动化应用部署的解决方案，便于客户轻松实现数据传输加密和信源加密。

立即购买

管理控制台

售前/售后人工服务

新老同享

首购4折起/新购85折起

多云部署

支持跨云产品任务部署

热点商品

HTTPS加速网关9.9元起

用户指南