Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-13 Thread Ognjen Blagojevic
Chris, On 6.3.2013 7:02, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- It seems that Tomcat 6.0.32 (and probably other 6.0.xx versions) use undocumented attribute for HTTPS connector protocols. So in Tomcat 7 you might use: sslProtocol=TLSv1.1 sslEnabledProtocols=TLSv1.1 and

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-08 Thread Ognjen Blagojevic
Chris, On 8.3.2013 1:25, Christopher Schultz wrote: For Tomcat 6.0.36 it reports: Protocols TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes SSL 3.0 Yes SSL 2.0 No Tomcat 7.0.37: Protocols TLS 1.2 No TLS 1.1 No TLS 1.0 Yes SSL 3.0 Yes SSL 2.0 No I agree, it is strange.

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-07 Thread Ognjen Blagojevic
Chris, On 7.3.2013 5:58, Christopher Schultz wrote: Which behavior is right? I prefer how Tomcat 6 is interepreting that attribute -- trying to enable best possible TLS protocol versions available. OTOH, from Tomcat 7 documents it seems that the value of attribute setProtocol is just passed to

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 3/7/13 3:05 AM, Ognjen Blagojevic wrote: I am testing both Tomcat 6.0.36 and 7.0.37 with the same, Oracle, JDK 1.7.0_09, on Windows XP SP3. I just unpack zip ditribution, uncomment default HTTPS connector (with sslProtocol=TLS

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-06 Thread Ognjen Blagojevic
Chris, On 6.3.2013 7:02, Christopher Schultz wrote: So in Tomcat 7 you might use: sslProtocol=TLSv1.1 sslEnabledProtocols=TLSv1.1 and in Tomcat 6.0.32: sslProtocol=TLSv1.1 protocols=TLSv1.1 It works for me. Can you file a bug for this? That should be a) documented and b) accept either

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 3/6/13 2:51 AM, Ognjen Blagojevic wrote: Chris, On 6.3.2013 7:02, Christopher Schultz wrote: So in Tomcat 7 you might use: sslProtocol=TLSv1.1 sslEnabledProtocols=TLSv1.1 and in Tomcat 6.0.32: sslProtocol=TLSv1.1

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Ognjen Blagojevic
Brijesh, On 5.3.2013 7:09, Brijesh Deo wrote: Is there a way to make TLS 1.1 required for https connection with Tomcat server. I am currently on Tomcat 6.0.32 with JRE 1.7 on Windows 7. I tried setting [sslProtocol=TLSv1.1] in the Connector definition in server.xml but that did not stop TLS

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Ognjen Blagojevic
Igor, On 5.3.2013 8:51, Igor Cicimov wrote: You need java7 for tls1.1 and 1.2 as far as i know. Java 6 supports up to TLSv1.1, and Java 7 up to TLSv1.2. -Ognjen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

RE: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Brijesh Deo
-Original Message- From: Ognjen Blagojevic [mailto:ognjen.d.blagoje...@gmail.com] Sent: 05 March 2013 13:59 To: users@tomcat.apache.org Subject: Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ? Brijesh, On 5.3.2013 7:09, Brijesh Deo wrote: Is there a way

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Ognjen Blagojevic
Brijesh, On 5.3.2013 10:11, Brijesh Deo wrote: Thanks for your detailed reply and the explanation. I gave it a quick try but it doesn’t quite work with Tomcat 6.0.32, the version that I am currently using. I checked the Http Connector documentation for Tomcat 6.0 and Tomcat 7.0 and the

RE: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Brijesh Deo
-Original Message- From: Ognjen Blagojevic [mailto:ognjen.d.blagoje...@gmail.com] Sent: 05 March 2013 16:01 To: users@tomcat.apache.org Subject: Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ? Brijesh, On 5.3.2013 10:11, Brijesh Deo wrote: Thanks for your

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Ognjen Blagojevic
Brijesh, On 5.3.2013 11:47, Brijesh Deo wrote: Thanks Ognjen. I tried with -Dhttps.protocols=TLSv1.1 in Tomcat startup but even this doesn’t work with Tomcat 6.0. Looks like upgrading to Tomcat 7.0 seems to be the only way to achieve this easily through configuration in server.xml. That was

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Brijesh Deo
Thanks a lot Ognjen for looking into this so extensively. I think I had tried this combination - sslProtocol=SSL and protocols=TLSv1.1. I will try again with both being TLSv1.1 and then I think it would work. Thanks again, Brijesh Sent from Samsung Mobile Original message

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Konstantin Kolinko
2013/3/5 Brijesh Deo b...@sonicwall.com: Hi, Is there a way to make TLS 1.1 required for https connection with Tomcat server. I am currently on Tomcat 6.0.32 with JRE 1.7 on Windows 7. I tried setting [sslProtocol=TLSv1.1] in the Connector definition in server.xml but that did not stop TLS

RE: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Brijesh Deo
-Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: 06 March 2013 03:58 To: Tomcat Users List Subject: Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ? 2013/3/5 Brijesh Deo b...@sonicwall.com: Hi, Is there a way to make TLS

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 3/5/13 8:29 AM, Ognjen Blagojevic wrote: Brijesh, On 5.3.2013 11:47, Brijesh Deo wrote: Thanks Ognjen. I tried with -Dhttps.protocols=TLSv1.1 in Tomcat startup but even this doesn’t work with Tomcat 6.0. Looks like upgrading to

RE: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-05 Thread Brijesh Deo
Thanks a lot Ognjen for looking into this so extensively. I think I had tried this combination - sslProtocol=SSL and protocols=TLSv1.1. I will try again with both being TLSv1.1 and then I think it would work. Thanks again, Brijesh Sent from Samsung Mobile Original message

How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-04 Thread Brijesh Deo
Hi, Is there a way to make TLS 1.1 required for https connection with Tomcat server. I am currently on Tomcat 6.0.32 with JRE 1.7 on Windows 7. I tried setting [sslProtocol=TLSv1.1] in the Connector definition in server.xml but that did not stop TLS 1.0 connections from being accepted. I am not

Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-04 Thread Igor Cicimov
On 05/03/2013 5:10 PM, Brijesh Deo b...@sonicwall.com wrote: Hi, Is there a way to make TLS 1.1 required for https connection with Tomcat server. I am currently on Tomcat 6.0.32 with JRE 1.7 on Windows 7. I tried setting [sslProtocol=TLSv1.1] in the Connector definition in server.xml but that

RE: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ?

2013-03-04 Thread Brijesh Deo
-Original Message- From: Igor Cicimov [mailto:icici...@gmail.com] Sent: 05 March 2013 13:22 To: Tomcat Users List Subject: Re: How to allow only TLS 1.1 connections to Tomcat (6.0) server with https ? On 05/03/2013 5:10 PM, Brijesh Deo b...@sonicwall.com wrote: Hi, Is there a way to