Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification.
The "Security/Ciphers" page has been changed by markt: https://wiki.apache.org/tomcat/Security/Ciphers?action=diff&rev1=20&rev2=21 Comment: Update versions, add Java 9 and update JSSE results == BIO/NIO/NIO2 with JSSE Results (Default) == - || || Java 6 || Java 7 || Java 8 || + || || Java 6 || Java 7 || Java 8 || Java 9 || - || Tomcat 7 || C || A || A || + || Tomcat 7 || C || B || A || A || - || Tomcat 8 || N/A || A || A || + || Tomcat 8 || N/A || B || A || A || - || Tomcat 8.5 || N/A || A || A || + || Tomcat 8.5 || N/A || B || A || A || - || Tomcat 9 || N/A || N/A || A || + || Tomcat 9 || N/A || N/A || A || A || Note: These results were obtained using the JCE Unlimited Strength Jurisdiction Policy Files - Note: The 6 results are capped at C because Java 6 does not support TLS 1.1 or 1.2. + Note: The Java 6 results are capped at C because Java 6 does not support TLS 1.1 or 1.2. + + Note: The Java 7 results are capped at B because Java 7 does not support AEAD ciphers. The equivalent OpenSSL cipher configurations used to obtain the above results are: || Java 6 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!DHE || || Java 7 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA:!DHE || || Java 8 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA || + || Java 9 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA || Note: kRSA ciphers are not excluded in Java 6 since they are likely to be the only ones left @@ -51, +54 @@ The results above were generated with: * Java 6, 64-bit, update 45 * Java 7, 64-bit, update 80 - * Java 8, 64-bit, update 77 + * Java 8, 64-bit, update 172 + * Java 9, 9.0.4 - * Apache Tomcat 7.0.69-dev, r1737253. + * Apache Tomcat 7.0.88-dev, r1737253. - * Apache Tomcat 8.0.34-dev, r1737224. + * Apache Tomcat 8.0.53-dev, r1737224. - * Apache Tomcat 8.5.1-dev, r1737241. + * Apache Tomcat 8.5.32-dev, r1737241. - * Apache Tomcat 9.0.0.M5-dev, r1737193. + * Apache Tomcat 9.0.9-dev, r1737193. - * tc-native 1.2.5 + * tc-native 1.2.16 --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
