Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-02-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jimmy, On 1/31/15 10:13 AM, Jammy Chen wrote: Hello Jason, Chris, Thanks for you answer and replying. I actually already tired that solution linked in the page https://access.redhat.com/solutions/1232233. but it does not work at all.

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-31 Thread Jammy Chen
Hello Jason, Chris, Thanks for you answer and replying. I actually already tired that solution linked in the page https://access.redhat.com/solutions/1232233. but it does not work at all. Connector port=8443 protocol=org.apache.coyote.http11.Http11Protocol maxThreads=150

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jason, On 1/30/15 4:32 AM, Jason Y wrote: Please refer to https://access.redhat.com/solutions/1232233 This link is /slightly/ out of date, in that it is missing more-recent information (i.e. support for TLSv1.1 and TLSv1.2 in tcnative versions

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-30 Thread Jason Y
the solution* Jammy 2015-01-29 22:00 GMT+08:00 Caldarale, Charles R chuck.caldar...@unisys.com : From: Jammy Chen [mailto:jamm...@gmail.com] Subject: How-to disable SSL V3 on Tomcat 6.0.18.0 Do everybody knows how-to disable SSL v3 in older tomcat version Server version: Apache Tomcat

How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Jammy Chen
Hello team, Do everybody knows how-to disable SSL v3 in older tomcat version, I have tried to variety solution including sslProtocols or sslEnabledProtocols but it both did not work well, the Firefox I am using to test is only select TLS 1 and result is that I were not able to access the site.

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jammy, On 1/29/15 11:02 AM, Jammy Chen wrote: Thanks for replying, I understood this is old, our product has already upgraded to latest version, but somehow, some of our users are still in such old stage, they do not plan uptake now but they

RE: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Caldarale, Charles R
From: Jammy Chen [mailto:jamm...@gmail.com] Subject: How-to disable SSL V3 on Tomcat 6.0.18.0 Do everybody knows how-to disable SSL v3 in older tomcat version Server version: Apache Tomcat/6.0.18 Server built: Jul 22 2008 02:00:36 Yes - move up to a current level and read the docs

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Jammy Chen
the important thing is how I can disable SSL V3 on Tomcat 6.0.18.0? I cannot find the solution* Jammy 2015-01-29 22:00 GMT+08:00 Caldarale, Charles R chuck.caldar...@unisys.com : From: Jammy Chen [mailto:jamm...@gmail.com] Subject: How-to disable SSL V3 on Tomcat 6.0.18.0 Do everybody knows

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Terence M. Bandoian
this is big security vulnerability. *so now the important thing is how I can disable SSL V3 on Tomcat 6.0.18.0? I cannot find the solution* Jammy 2015-01-29 22:00 GMT+08:00 Caldarale, Charles R chuck.caldar...@unisys.com : From: Jammy Chen [mailto:jamm...@gmail.com] Subject: How-to disable SSL V3