Return-Path: 
 <tomcat-user-return-129323-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 17550 invoked from network); 30 Jun 2005 01:39:12 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 30 Jun 2005 01:39:12 -0000
Received: (qmail 74177 invoked by uid 500); 30 Jun 2005 01:38:52 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 74064 invoked by uid 500); 30 Jun 2005 01:38:52 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 74048 invoked by uid 99); 30 Jun 2005 01:38:51 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 Jun 2005 18:38:51 -0700
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Received: from [63.240.6.50] (HELO mail.Mi8.com) (63.240.6.50)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 Jun 2005 18:38:54 -0700
Received: from 172.16.1.112 by mail.Mi8.com with ESMTP (- GW05 Welcome
 to Mi8 Corporation www.Mi8.com); Wed, 29 Jun 2005 21:38:41 -0400
X-Server-Uuid: E0C866E6-C6CD-48B5-AE61-E57E73CF3CC7
Received: from MI8NYCMAIL01.Mi8.com ([172.16.1.151]) by
 D01SMTP02.Mi8.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 29 Jun
 2005 21:38:41 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Subject: RE: Specifying multiple, valid ciphers in standalone tomcat
 configuration 4.0.29
Date: Wed, 29 Jun 2005 21:37:36 -0400
Message-ID: <39E0F47E5CE19541B52C3B315B8B83490DF6A9@MI8NYCMAIL01.Mi8.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Specifying multiple, valid ciphers in standalone tomcat
 configuration 4.0.29
Thread-Index: AcV9FEsFsUJ9gmL5Sf2LyAPgeaXeSA==
From: "Chris Zappala" <Zap@Bladelogic.com>
To: tomcat-user@jakarta.apache.org
X-OriginalArrivalTime: 30 Jun 2005 01:38:41.0216 (UTC)
 FILETIME=[71CF5C00:01C57D14]
X-WSS-ID: 6EDD92AB2R02550915-01-01
Content-Type: text/plain;
 charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

I'm going to answer my own question.
=20
The cipher attribute is not support in tomcat 4.1.29.
=20
Thanks,
-chris

________________________________

From: Chris Zappala
Sent: Wed 6/29/2005 1:52 PM
To: tomcat-user@jakarta.apache.org
Subject: Specifying multiple, valid ciphers in standalone tomcat =
configuration 4.0.29



Hi,

I'm trying to specify a list of valid ciphers for a standalone tomcat
instance. I've scoured the FAQs, documentation, and googled until my
eyes bled.

I did find references to the RFC, and to the best of my knowledge, I am
specifying the ciphers in compliance with those specifications.

I know that the ciphers need to be specified in a comma-separated list.
However, what are the valid ciphers and/or cipher aliases that can be
specified? The configuration below does not appear to work. I'm assuming
this is an issue with the way I'm specifying the ciphers.

If someone could provide an example, I'd appreciate it.

Here is the relevant excerpt from my server.xml file (arrows point out
cipher attribute).

<Service name=3D"Tomcat-Standalone">
        <Connector acceptCount=3D"100"
            =
className=3D"org.apache.catalina.connector.http.HttpConnector"
            debug=3D"0" disableUploadTimeout=3D"true" =
enableLookups=3D"true"
            maxProcessors=3D"75" minProcessors=3D"5" port=3D"443"
            scheme=3D"https" secure=3D"true" =
useURIValidationHack=3D"false">
            <Factory

className=3D"org.apache.catalina.net.SSLServerSocketFactory"
                clientAuth=3D"false"

---->ciphers=3D"ALL,!ADH,!aNULL,!eNULL,!LOW,!EXP,RC4+RSA,+HIGH,+MEDIUM"<-=
-
--
                keystoreFile=3D"somefile"
                keystorePass=3D"somepassword" protocol=3D"TLS"/>
        </Connector>

Thanks you kindly for any assistance.

-chris





---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org