[[hardenedMode]]
= hardened-mode
:author: Wojciech Kapcia <wojciech.kapcia@tigase.org>
:version: v2.0, June 2017: Reformatted for Kernel/DSL

*Default value:* `false`

*Example:* `'hardened-mode' = true`

*Possible values:* `true|false`

*Description:* Enabling hardened mode affects handling of security aspects within Tigase. It turns off workarounds for SSL issues, turns off SSLv2 and forces enabling more secure ciphers suites. It also forces requirement of StartTLS.

Enabling it requires link:http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html[UnlimitedJCEPolicyJDK] installed. We prefer to use OracleJDK as our tests revealed that using OpenJDK in hardened mode may cause issues with some clients on some platforms.

*Available since:* 5.2.0
