On 8/10/22 6:50 AM, Brian Wolfe wrote:
You can disable the protocols at the java level in the java.security file
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, TLSv1,
TLSv1.1
I think that's exactly what I did on "Customer Box #1" (and forgot to
document having done).
On 8/10/22 8:52 AM, Jason Hall wrote:
If you have another network device in front of your server - that could be what
is trumping the app server's settings.
I'd planned on investigating that as well.
But it *looks* like the cert I'm seeing matches the cert in the keystore
their Tomcat is
,
Jason
- Original Message -
From: "Brian Wolfe"
To: "Tomcat Users List"
Sent: Wednesday, August 10, 2022 9:50:01 AM
Subject: Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have
sslProtocol="TLSv1.2"
You can disable the protocols at the java l
ht-
> > Von: logo
> > Gesendet: Mittwoch, 10. August 2022 10:22
> > An: Tomcat Users List
> > Betreff: Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I
> have
> > sslProtocol="TLSv1.2"
> >
> > Thomas,
> >
>
Hello Peter,
> -Ursprüngliche Nachricht-
> Von: logo
> Gesendet: Mittwoch, 10. August 2022 10:22
> An: Tomcat Users List
> Betreff: Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have
> sslProtocol="TLSv1.2"
>
> Thomas,
>
> Am 2
Thomas,
Am 2022-08-10 08:59, schrieb Thomas Hoffmann (Speed4Trade GmbH):
Hello,
-Ursprüngliche Nachricht-
Von: Peter Kreuser
Gesendet: Mittwoch, 10. August 2022 08:44
An: Tomcat Users List
Betreff: Re: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have
sslProtocol="TLSv1.2"
Hello,
> -Ursprüngliche Nachricht-
> Von: Peter Kreuser
> Gesendet: Mittwoch, 10. August 2022 08:44
> An: Tomcat Users List
> Betreff: Re: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have
> sslProtocol="TLSv1.2"
>
>
>
> James,
>
> the most recent connector attribute is
