# Streamlock SSL configuration includes SSLv3 and TLS1.0 by default. Shouldn't it be updated?

**URL:** https://community.wowza.com/t/streamlock-ssl-configuration-includes-sslv3-and-tls1-0-by-default-shouldnt-it-be-updated/52075
**Category:** Wowza Streaming Engine
**Tags:** security
**Created:** [October 4, 2018, 10:45pm UTC](https://community.wowza.com/t/streamlock-ssl-configuration-includes-sslv3-and-tls1-0-by-default-shouldnt-it-be-updated/52075 "2018-10-04T22:45:14Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Chip\_Roebuck](https://avatars.discourse-cdn.com/v4/letter/c/f17d59/32.png) [@Chip\_Roebuck](https://community.wowza.com/u/Chip_Roebuck)
#### Post date: [October 4, 2018, 10:45pm UTC](https://community.wowza.com/t/streamlock-ssl-configuration-includes-sslv3-and-tls1-0-by-default-shouldnt-it-be-updated/52075/1 "2018-10-04T22:45:14Z")

</div>

I discovered that the default configuration for streamlock certificate configuration doesn’t provide the best security model. I had to edit the /conf/Vhost.xml file as:

${com.wowza.wms.context.VHostConfigHome}/conf/[filename].streamlock.net.jks  
[password]  
JKS  
TLS  
SunX509  
TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256,TLS\_RSA\_WITH\_AES\_128\_CBC\_SHA256,TLS\_RSA\_WITH\_AES\_128\_CBC\_SHA,TLS\_EMPTY\_RENEGOTIATION\_INFO\_SCSV  
SSLv2Hello,TLSv1.1,TLSv1.2

---

<div class="post-metadata">

### Author: ![Andrew\_Ramberg](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@Andrew\_Ramberg](https://community.wowza.com/u/Andrew_Ramberg)
#### Post date: [October 8, 2018, 8:34pm UTC](https://community.wowza.com/t/streamlock-ssl-configuration-includes-sslv3-and-tls1-0-by-default-shouldnt-it-be-updated/52075/2 "2018-10-08T20:34:37Z")

</div>

Hi Chip,

Thanks for sharing your findings.

The default SSL Protocols and Cipher Suites are provided by the installed version of Java JRE. By default Wowza Streaming Engine allows all SSL Protocols and Cipher suites that Java provides but that can be tweaked as you’ve done following the instructions in the article: [https://www.wowza.com/docs/how-to-improve-ssl-configuration](https://www.wowza.com/docs/how-to-improve-ssl-configuration)

Best regards,

Andrew

---

<div class="post-metadata">

### Author: ![Patrick\_Healey](https://avatars.discourse-cdn.com/v4/letter/p/13edae/32.png) [@Patrick\_Healey](https://community.wowza.com/u/Patrick_Healey)
#### Post date: [October 10, 2018, 7:46pm UTC](https://community.wowza.com/t/streamlock-ssl-configuration-includes-sslv3-and-tls1-0-by-default-shouldnt-it-be-updated/52075/3 "2018-10-10T19:46:29Z")

</div>

Is there additional information available regarding the Stream Engine and the configuration of the JRE specifficaly to resolve this issue?