Network -> Local Servers/Proxies -> Proxy Properties have the Security Protocols disabled

130 views
Skip to first unread message

Movilianu Dan

unread,
Mar 19, 2024, 4:55:32 AM3/19/24
to ZAP User Group
Hello there,

First time poster. I'm trying to use ZAP to replace Bur Suite but I came across a small issue which is blocking me.

When trying to configure my proxy, I am not able to use SSL 3, TLS 1, TLS 1.1 or SSLv2Hello as an accepted security protocol since they are disabled by default and greyed out (see attachment).

I read the documentation which states that this may come from a lack of support from the JRE. Thing is I had installed the latest version of JDK (JDK 21) from Oracle and I also made sure that the environment variables are set for both the system and user (since I had issues on this front in the past where it wouldn't see the variable unless it was added for both #windows).

Does anyone have any idea what might be the issue or what I may do to make them enabled? 

Thank you for reading and helping,
Have a great day,
Dan.

 


security_protocols.png
user_env_java.png
system_env_java.png

thc...@gmail.com

unread,
Mar 20, 2024, 4:26:26 AM3/20/24
to zaprox...@googlegroups.com
Hi,

Not necessarily lack of support. They are now deemed insecure and are
disabled by default, you can still enable them by tweaking the JRE
configs, e.g. do the reverse of
https://www.java.com/en/configure_crypto.html#DisableTLS

Best regards.
Reply all
Reply to author
Forward
0 new messages