Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
Message-ID: <525547F3.1020806@christopherschultz.net>
Date: Wed, 09 Oct 2013 08:11:31 -0400
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8;
 rv:24.0) Gecko/20100101 Thunderbird/24.0
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Issue while using SSL with Embedded Tomcat 6.0.37
References: 
 <1381283289.21168.YahooMailAndroidMobile@web190705.mail.sg3.yahoo.com>
In-Reply-To: 
 <1381283289.21168.YahooMailAndroidMobile@web190705.mail.sg3.yahoo.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Chirag,

On 10/8/13 9:48 PM, Chirag Dewan wrote:
> For this particular cipher, the server sends a RST to the client 
> after the certificate exchange is done. And the handshaking
> fails,for the first time only. Second request onwards handshaking
> happens and the traffic flows as usual.

When you say "first" and "second" request... are you talking about the
first and second request that the server receives since it's been
started, or are you talking about the first and second requests that
the client makes without restarting? What action resets the experiment?

I'm wondering if the server "gets fixed" or the client.

> What I understand is,I can provide a set of ciphers to the
> connector and the client will select from that particular set and
> can thus avoid the particular cipher. Can I do this in embedded
> tomcat? And what set of ciphers should I allow with that
> connector?

I'm not sure why the embedded case would be any different from the
non-embedded case... you are setting-up your connectors in a standard
way, right? Maybe if you posted some code...

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=JXdI
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org