tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 62748] Add support for TLS 1.3 (RFC 8446)
Date Tue, 09 Oct 2018 21:24:23 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=62748

--- Comment #20 from Christopher Schultz <chris@christopherschultz.net> ---
Using OpenJDK 11, a simple https:// protocol test works for both configurations
"TLSv1.2+TLSv1.3" and simply "TLSv1.3". In the former case, Firefox/Chrome
connect using TLSv1.2. For the latter case, Firefox/Chrome fail with
SSL_ERROR_PROTOCOL_VERSION_ALERT or ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors.

ssltest successfully negotiates both TLS_AES_128_GCM_SHA256 and
TLS_AES_256_GCM_SHA384.

Qualys/SSLLabs client test[1] confirms that both of these ciphers are supported
by my browser.

[1] https://www.ssllabs.com/ssltest/viewMyClient.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message