Restrict SSL protocols to TLS 1.2 on Vert.x -

i'd restrict ssl protocols tls 1.2 on vert.x 2.1.5 http server , client. i'm using jdk 7. have experience on how it?

oracle says here ssl protocols should restricted on jre 7 explicitly setting enabled protocols on ssl engine:

sslengine.setenabledprotocols(new string[] {"sslv2hello", "tlsv1", "tlsv1.1", "tlsv1.2"});

now check out tcpsslhelper.java class in vert.x v2.1.5. there constant containing list of enabled protocols, , it's used set enabled protocols on ssl engine:

// make sure sslv3 not enabled due poodle issue  private static final string[] enabled_protocols =      {"sslv2hello", "tlsv1", "tlsv1.1", "tlsv1.2"}; 

change value {"tlsv1.2"}; limit support tlsv1.2.

for quick test:

• create org.vertx.java.core.net.impl package in own project
• copy tcpsslhelper package , edit enabled protocols constant
• build , run.
• curl using specific protocol directives, , see server connect tlsv1.2.

your source typically come before third party source on classpath, change override class in vert.x lib , need restrict tlsv1.2.

ideally submitted vert.x patch, protocols read on command line properties.