XP000336-Internet Explorer / Edge SECUREMATRIX

XP000336-Internet Explorer / Edge
SECUREMATRIX
... 1/6
XP000336-Internet Explorer / Edge
SECUREMATRIX
Top / XP000336-Internet Explorer / Edge
SECUREMATRIX
2016/06/23
2016/06/27
Version SECUREMATRIX Version 3.8.0 / 3.9.0
2016 6 22
Microsoft
DHE (Diffie-Hellman
)
Internet Explorer / Edge
SECUREMATRIX
SECUREMATRIX Version 4.0.0
SECUREMATRIX
Version 4.1.0
Microsoft
[
]
Windows7
KB3161608
Windows8.1
KB3161606
Windows10
KB3163018
[
]
Internet Explorer / Edge
SECUREMATRIX
SECUREMATRIX
https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27
XP000336-Internet Explorer / Edge
SECUREMATRIX
... 2/6
SECUREMATRIX
ciphers
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
[
]
1.
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
2.
SECUREMATRIX
[
]
#####
#####
(1)
[
:root
]
# cd /opt/cse/smx/admin/servlet/conf/
# cp -p server.xml server.xml.yyyymmdd
#
cd /home/smxd/installer/tmp/opt/cse/smx/admin/servlet/conf/
# cp -p server.xml server.xml.yyyymmdd
yyyymmdd
(2)
server.xml
1. /opt/cse/smx/admin/servlet/conf/server.xml
[
(
)]
<Connector port="8443" maxHttpHeaderSize ="8192"
(
)
https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27
XP000336-Internet Explorer / Edge
SECUREMATRIX
... 3/6
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="/opt/cse/smx/admin/servlet/conf/smx.jks"/>
[
(
)]
<Connector port="8443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="/opt/cse/smx/admin/servlet/conf/smx.jks"/>
ciphers=
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
2. /home/smxd/installer/tmp/opt/cse/smx/admin/servlet/conf/server.xml
[
(
)]
<Connector port="8443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###ADMIN_JKS_FILE###" />
[
(
)]
<Connector port="8443" maxHttpHeaderSize ="8192"
)
(
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###ADMIN_JKS_FILE###" />
ciphers=
(3) admin
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
(smx-admin)
# /sbin/service smx-admin restart
##### GSB
#####
(1)
https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27
XP000336-Internet Explorer / Edge
SECUREMATRIX
... 4/6
[
:root
]
# cd /opt/cse/smx/gsb/servlet/conf/
# cp -p server.xml server.xml.yyyymmdd
# cd /home/smxd/installer/tmp/opt/cse/smx/gsb/servlet/conf/
# cp -p server.xml server.xml.yyyymmdd
yyyymmdd
(2)
server.xml
1. /opt/cse/smx/gsb/servlet/conf/server.xml
[
(
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="/opt/cse/smx/gsb/servlet/conf/gsb_out.jks" />
[
(
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="/opt/cse/smx/gsb/servlet/conf/gsb_out.jks" />
ciphers=
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
2. /home/smxd/installer/tmp/opt/cse/smx/gsb/servlet/conf/server.xml
[
(
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="###GSB_OUT_JKS_FILE###" />
https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27
XP000336-Internet Explorer / Edge
[
(
SECUREMATRIX
... 5/6
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="###GSB_OUT_JKS_FILE###" />
ciphers=
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
(3) GSB
(smx-gsb)
[
root
]
# /sbin/service smx-gsb restart
##### ISB
#####
(1)
[
root
]
# cd /opt/cse/smx/isb/servlet/conf/
# cp -p server.xml server.xml.yyyymmdd
# cd /home/smxd/installer/tmp/opt/cse/smx/isb/servlet/conf/
# cp -p server.xml server.xml.yyyymmdd
yyyymmdd
(2)
server.xml
1. /opt/cse/smx/isb/servlet/conf/server.xml
[
(
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="/opt/cse/smx/isb/servlet/conf/isb238-71.jks" />
[
(
)]
<Connector port="443" maxHttpHeaderSize ="8192"
)
(
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27
XP000336-Internet Explorer / Edge
SECUREMATRIX
... 6/6
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="/opt/cse/smx/isb/servlet/conf/isb238-71.jks" />
ciphers=
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
2. /home/smxd/installer/tmp/opt/cse/smx/isb/servlet/conf/server.xml
(
[
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="###ISB_JKS_FILE###" />
[
(
)]
<Connector port="443" maxHttpHeaderSize ="8192"
(
)
ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="###ISB_JKS_FILE###" />
ciphers=
(3) ISB
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
(smx-isb)
[
root
]
# /sbin/service smx-isb restart
(c) Copyright 2015 CSE Co.,Ltd. All rights reserved.
https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27