#networkaddress.cache.ttl=10
#networkaddress.cache.negative.ttl=10

# Extended JDK (25) default configuration
# The last line differs from the default configuration,
# We use the modern configuration by Mozilla (https://github.com/mozilla/server-side-tls) as guidelines.
jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, DTLSv1.0, RC4, DES, \
    MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \
    ECDH, TLS_RSA_*, rsa_pkcs1_sha1 usage HandshakeSignature, \
    ecdsa_sha1 usage HandshakeSignature, dsa_sha1 usage HandshakeSignature, \
    X448, secp521r1, SHA1