Re: SSL 3.0 fallback vulnerability encounters to openfire/bouncycastle?

I believe it can be simply turned off for XMPP socket via admin console, but for Jetty you might need release the patch for

HttpBindManager.java

AdminConsolePlugin.java

finalSslContextFactory sslContextFactory =newSslContextFactory();

sslContextFactory.addExcludeProtocols("SSLv3");