Re: Tomcat 7 and SHA-1

2016-07-03 Thread Greg Beresnev
7-01 16:21 GMT-04:00 Christopher Schultz > > <ch...@christopherschultz.net > >> : > > > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > >> > >> Greg, > >> > >> On 7/1/16 3:03 AM, Greg Beresnev wrote: > >>> T

Re: Tomcat 7 and SHA-1

2016-07-01 Thread Greg Beresnev
Thanks Daniel - any idea which cipher in particular needs to be absent in order for the SHA-1-based connection/authentication was rejected/failed? regards, Greg On Fri, Jul 1, 2016 at 4:53 PM, Daniel Savard <daniel.sav...@gmail.com> wrote: > 2016-06-30 23:05 GMT-04:00 Greg

Tomcat 7 and SHA-1

2016-06-30 Thread Greg Beresnev
Hi, We're in the process of updating our web application to stop using SHA-1 certificates and I was wondering if there was some way to configure Tomcat (we're on version 7.0.39 - yes, I know, we are pretty old-school and should get with the times) to either throw errors or at least log warnings