Thanks for the KB article. Since the issue is insecure CBC mode encryption, it appears the locked.properties file has to end up with only one enabled protocol and two enabled cipher suites:
secureProtocols.1=SSLv3
enabledCipherSuite.1=SSL_RSA_WITH_RC4_128_MD5
enabledCipherSuite.2=SSL_RSA_WITH_RC4_128_SHA
Am I on the right track here?
Thanks,
Geoff
