In my spring configuration, I'm trying to determine how to restrict the TLS 
version that is used; ideally I always want to use TLS 1.2. I see that I can 
add a secureSocketProtocol attribute and an excludeProtocols attribute to sort 
of fine tune the allowable protocols, but the documentation only lists "SSL", 
"TLS", and "TLSv1" as "common examples" without providing any kind of 
definitive list of legal values. Does such a list exist somewhere? And does it 
include a value that would allow restriction to TLS 1.2?

Thanx,

Stephen W. Chappell

Reply via email to