Glassfish 2.0 Poodle vulnerability - How to disable SSL and allow TLS only

Question

Is there any JVM option or Grizzly framework config file to prevent SSLv3 connections ? Somehow to disable SSLv3 and allow TLS cipher only. Any other idea is welcome.

Answer 1

Do you have a web admin console in GlassFish 2? In GlassFish 3, the admin can disable SSLv3 under Network Config / Network Listeners / http-listener-n / SSL tab

See screenshots at http://javadude.wordpress.com/2010/04/06/getting-started-with-glassfish-v3-and-ssl/