tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Enforcing server preference for cipher suites
Date Mon, 09 Oct 2017 21:06:23 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Harish,

On 10/9/17 12:31 PM, Harish Krishnan wrote:
> Need your expert input here. Not sure what I am doing wrong,  but I
> cannot get this server preference cipher suites feature working.
> 
> My setup: Latest tomcat 7.x build (which supports
> useServerCipherSuitesOrder attribute) Latest Java 1.8 build.
> 
> No matter what value I set to this attribute (true OR false OR
> undefined which is by default), I always see the Clients preference
> picked. As an example, if clients order is ABCDEF, and servers
> order is DEFABC, no matter what value I set to this
> useServerCipherSuitesOrder attribute, always the order selected is
> ABC...

What exact version of Tomcat are you using?
What exact version of Java are you using?

Please post your <Connector> configuration, minus any secrets.

Do you know if you are using the BIO, NIO, or APR connector?

How are you determining client-preference?

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=SuWg
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message