Re: AW: 8.5.11/8.5.14 using SSLHostConfig protocols and ciphers list ignored

2017-06-23 Thread Todd
I'm experiencing the exact same issue with 8.5.14 - cipher list seems to be ignored, regardless of what I put in SSLAbs and validating via browser on my website a set of ciphers is used that I have not listed. I am able to change protocols (for instance, I can remove TLSv1 and the system

Re: AW: 8.5.11/8.5.14 using SSLHostConfig protocols and ciphers list ignored

2017-04-27 Thread Mark Thomas
On 27/04/17 19:49, Dan Morrison wrote: > I'm still confused by JSSE vs OpenSSL. From all that I can figure I > think I'm setup for JSSE Ciphers ? (not counting the above test) The are two parts. Config style and implementation. As much as we can, we have tried to make all combinations work

Re: AW: 8.5.11/8.5.14 using SSLHostConfig protocols and ciphers list ignored

2017-04-27 Thread Dan Morrison
On 04/27/2017 01:32 PM, Dan Morrison wrote: On 04/27/2017 10:57 AM, Kreuser, Peter wrote: Hi (WhoEverYouMayBe - you may want to sign with a name???), Server version:Apache Tomcat/8.5.11 Server built: Jan 10 2017 21:02:52 UTC Server number: 8.5.11.0 OS Name:

Re: AW: 8.5.11/8.5.14 using SSLHostConfig protocols and ciphers list ignored

2017-04-27 Thread Dan Morrison
On 04/27/2017 10:57 AM, Kreuser, Peter wrote: Hi (WhoEverYouMayBe - you may want to sign with a name???), Server version:Apache Tomcat/8.5.11 Server built: Jan 10 2017 21:02:52 UTC Server number: 8.5.11.0 OS Name: Linux OS Version: