RE: logjam attacks in tomcat 7

2015-10-01 Thread Rahul Singh
C_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA" > Subject: Re: logjam attacks in tomcat 7 > To: users@tomcat.apache.org > From: ma...@apache.org > Date: Thu, 1 O

Re: logjam attacks in tomcat 7

2015-10-01 Thread Christopher Schultz
no clients who support ECDHE but nothing better than RC4. Remove that at once. 2. Prioritize the suites with higher key bit counts and larger hashes (move them towards the front), unless performance is a significant concern for you. 3. Consider adding cipher suites based upon 3DES for some varie

Re: logjam attacks in tomcat 7

2015-10-01 Thread Mark Thomas
gt; > > >> Date: Thu, 1 Oct 2015 10:26:43 +0530 >> Subject: Re: logjam attacks in tomcat 7 >> From: srikanth.hu...@gmail.com >> To: users@tomcat.apache.org >> >> Configuration like mentioned below should be able to resolve your issue: >> >&g

Re: logjam attacks in tomcat 7

2015-09-30 Thread Srikanth Hugar
Configuration like mentioned below should be able to resolve your issue: Srikanth Hugar www.gharki.com On Thu, Oct 1, 2015 at 10:22 AM, Rahul Singh wrote: > Dear Tomcat Support Team,Thanks for your continuous support. > In our Application Tomcat V 7.0.54 is used. We

logjam attacks in tomcat 7

2015-09-30 Thread Rahul Singh
Dear Tomcat Support Team,Thanks for your continuous support. In our Application Tomcat V 7.0.54 is used. We are facing the problem of "Server has a weak, ephemeral Diffie-Hellman public key ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY" In chrome browser. Tomcat server .xml have following configuration,

RE: logjam attacks in tomcat 7

2015-09-30 Thread Rahul Singh
Yes i know this fix, i just want to know, waht is deafult cipher deatil, in my existing server.xml no cipher parameter value is mentioned.So please help me to understand the same. > Date: Thu, 1 Oct 2015 10:26:43 +0530 > Subject: Re: logjam attacks in tomcat 7 > From: srikanth.hu...@