Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of uma_rk@comcast.net designates
 76.96.30.40 as permitted sender)
Date: Fri, 23 Oct 2009 05:31:49 +0000 (UTC)
From: uma_rk@comcast.net
To: Tomcat Users List <users@tomcat.apache.org>
Message-ID: 
 <934269382.6725261256275909371.JavaMail.root@sz0016a.emeryville.ca.mail.comcast.net>
In-Reply-To: 
 <99C8B2929B39C24493377AC7A121E21F84059CE5BE@USEA-EXCH8.na.uis.unisys.com>
Subject: RE: Default SSL ciphers supported by Tomcat 6
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_350269_352837307.1256275909370"

------=_Part_350269_352837307.1256275909370
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Yes I saw that statement in the document. I was hoping
someone here could tell me identify the default ciphers used
by JDK6 (which is what I use under Tomcat6).

This info seems basic enough; but I am unable to find it.
I understand this is Tomcat list - I hope I do not get flamed for
asking a JDK question.

Regards,

/U
----- Original Message -----
From: Charles R Caldarale 
To: Tomcat Users List 
Sent: Fri, 23 Oct 2009 03:09:34 +0000 (UTC)
Subject: RE: Default SSL ciphers supported by Tomcat 6

> From: uma_rk@comcast.net [mailto:uma_rk@comcast.net]
> Subject: Default SSL ciphers supported by Tomcat 6
> 
> I am looking for the default set of SSL(v3) ciphers supported by 
> Tomcat 6.0.x.

It's in the doc:

"ciphers

"The comma separated list of encryption ciphers that this socket is allowed to use. By default, the default ciphers for the JVM will be used. Note that this usually means that the weak export grade ciphers will be included in the list of available ciphers. The ciphers are specified using the JSSE cipher naming convention."

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

Tomcat does not include any encryption capability of its own, unless you're using APR.  For that, you'll need to look at the OpenSSL doc.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.


------=_Part_350269_352837307.1256275909370--