Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread dkumar
Hello All, We have upgraded the tomcat(7.0.35) and ssl(0.9.8x) Still facing same issue Please suggest Thanks and regards Deepak Kumar From: Pid p...@pidster.com To: Tomcat Users List users@tomcat.apache.org Date: 02/09/2013 11:35 PM Subject:Re: How to limit the number of

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread Mark Thomas
On 11/02/2013 11:10, dku...@ccilindia.co.in wrote: Hello All, We have upgraded the tomcat(7.0.35) and ssl(0.9.8x) Still facing same issue Please suggest Are you sure you are using the APR/native connector? Mark - To

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread dkumar
Hello Mark We have just updated the tomcat version to 7.0.35 and have not explicitly gave any connector protocol in connector tag, when tomcat is starting its giving Initializing ProtocolHandler [http-bio-443] Regards Deepak From: Mark Thomas ma...@apache.org To: Tomcat Users List

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread dkumar
Hello Mark We have just updated the tomcat version to 7.0.35 and have not explicitly gave any connector protocol in connector tag, when tomcat is starting its giving Initializing ProtocolHandler [http-bio-8443] Regards Deepak From: Mark Thomas ma...@apache.org To: Tomcat Users List

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread Mark Thomas
On 11/02/2013 11:31, dku...@ccilindia.co.in wrote: Hello Mark We have just updated the tomcat version to 7.0.35 and have not explicitly gave any connector protocol in connector tag, when tomcat is starting its giving Initializing ProtocolHandler [http-bio-443] Which means you are using

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread dkumar
Hello, We tried to set APR connector protocol attribute in connector tag but we are not able to start the tomcat as the supporting library are not found in JDK 1.7 installed in my system Please suggest where we will get the APR connector file. @Mark Sorry for duplicate message. That has a

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-11 Thread Mark Thomas
On 11/02/2013 13:00, dku...@ccilindia.co.in wrote: Hello, We tried to set APR connector protocol attribute in connector tag but we are not able to start the tomcat as the supporting library are not found in JDK 1.7 installed in my system Please suggest where we will get the APR connector

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-09 Thread dkumar
Hello All, @ Mark we have not specified any specific connector protocol in the connector tag, is that mean we are using native APR connector, and if it is so, then as renegotiation is not permitted in APR why VA tool says renegotiation DoS vulnerability, and it would be of great help if you

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Deepak, On 2/9/13 4:05 AM, dku...@ccilindia.co.in wrote: we have not specified any specific connector protocol in the connector tag, is that mean we are using native APR connector, and if it is so, then as renegotiation is not permitted in APR

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-09 Thread Pid
On 08/02/2013 15:05, Mark Thomas wrote: On 08/02/2013 14:34, Caldarale, Charles R wrote: From: dku...@ccilindia.co.in [mailto:dku...@ccilindia.co.in] Subject: How to limit the number of renegotiations for a single TLS / SSL connection We are using - Tomcat Version - 6.0.18 Please suggest

How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-08 Thread dkumar
Hello All, We are using - Tomcat Version - 6.0.18 Operating System Version : HP-UX 11.31 SSL Version - OpenSSL 0.9.8k 25 Mar 2009 Port - 8443 By running the venerability assessment test we are getting the following observation The remote service encrypts traffic using TLS / SSL and permits

RE: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-08 Thread Caldarale, Charles R
From: dku...@ccilindia.co.in [mailto:dku...@ccilindia.co.in] Subject: How to limit the number of renegotiations for a single TLS / SSL connection We are using - Tomcat Version - 6.0.18 Please suggest the recommended solution for tomcat Try using a version of Tomcat that's newer than 4.5

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-08 Thread Mark Thomas
On 08/02/2013 14:34, Caldarale, Charles R wrote: From: dku...@ccilindia.co.in [mailto:dku...@ccilindia.co.in] Subject: How to limit the number of renegotiations for a single TLS / SSL connection We are using - Tomcat Version - 6.0.18 Please suggest the recommended solution for tomcat