From b3d6d772893595a978801ac09a2e50124d227c11 Mon Sep 17 00:00:00 2001
From: Randy Bush <randy@psg.com>
Date: Sat, 4 Jul 2020 15:33:33 -0700
Subject: [PATCH] from wiki

---
 pages/PunchJavaForIPMI) | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 pages/PunchJavaForIPMI)

diff --git a/pages/PunchJavaForIPMI) b/pages/PunchJavaForIPMI)
new file mode 100644
index 0000000..3feebf0
--- /dev/null
+++ b/pages/PunchJavaForIPMI)
@@ -0,0 +1,19 @@
+# Punch Certs for Web-Based IPMI (on a Mac)
+
+Web-Based access to IPMI on SuperMicros gives Java security exceptions, a joke in itself.  How to disable?
+
+```
+cd /Library/Internet\ Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/security/
+```
+
+edit java.security and remove MD5 from
+
+```
+jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024
+```
+
+and remove MD5withRSA
+
+```
+jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768
+```
\ No newline at end of file