-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Todd,
On 6/30/17 1:30 PM, Todd wrote: > Christopher Schultz-2 wrote >> Yup: if you use iptables (ipchains hasn't been used in ... >> decades?) to do port-redirection, then you are in fact hitting >> Tomcat / JVM (essentially) directly. > > Yes - iptables, sorry brain fart. > > > Christopher Schultz-2 wrote >> Can you confirm whether or not you are using the OpenSSL >> provider? > > How can I verify my provider? > > > Christopher Schultz-2 wrote >> What version of OpenSSL are you using? These cipher suites should >> have well-known names and numeric identifiers (which is how the >> TLS handshake works), but it looks like the cipher suite names >> are somehow being confused. > > OpenSSL 1.0.2g > > > Christopher Schultz-2 wrote >> What happens if you narrow your cipher suite list down to a >> single cipher? Does ssllabs report just a single available cipher >> (even if it's not the one you configured)? >> >> - -chris > > Whether I put in a single cipher, literal garbage text, or the list > that I want - ssllabs reports the same list of ciphers detected as > I posted above. I also get the same cipher on Chrome that is not in > the list I'm putting in my configuration as well. This really sounds like something else is going on. Are you *sure* that your hostname/IP from the outside world is really routing to the place you think it is? - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJZVrO+AAoJEBzwKT+lPKRYbeoP/AiCGHKWkgWmX3uzs7L1wJua HKXscjgWmf+1VxPt5k8ZG6rBeRX9io0LQOwIpfBmXQVibkPaP1X/Kyb3kqvpdSz/ R0sHy13DHMRA30DhVlPhvcnLpfHkI0tU/CwmS6YG8VgiA1VReuD4q+CPxFRy+LvZ vetuK2nG0hRU0yijQx0tsox3g2mTEorn+ysTvTaDhKA6ZDK1ph64RqoWe6jfPmKR FOfWrDv+JZSwdaOJZXgrV0YB60yxoklcUQYAa+BpAgf0DUOw94v0t0pFHCNStJhK MTeaRFX6YEAixeJXXkZx9oYk9FIQnVOGH5doc+JTxNjk/Z2kHjohDny7ZYrM9jFD jTUaiqb1rHVDvSxRMnBbCb32w31J+sBuqj8OmsZu86Xbk0nrQX8445dhqEiKkFAl MvKWYJbIrLUWBmpFPqkmD7/yc+TfAExpNN2CeVSCle2+jlHiN7pA2AhMlHa31McY xCMygqy7esewNMULTx0u3GUwhEeyqYWAmtC6fXX1UJcypQIQ/AVHPBpcJiG9q50W XukLlzak0xTmv+d/sEBl/BEjwCpE67pEISnfp7i/6fuADZ6xtr+qAMiyw/WHTFLb NeW++I1LvUCsy1Ihq6T3hRQf+5c97HBqSm0mO+p9Rn+QWN80x56KL85C4JTDI9Ls tTwl6338NrElYKrQVgZk =Fpm8 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
