Is there any chance for the OpenSSL-style ciphers to be backported to the 7 
release line?

-----Original Message-----
From: George Stanchev [mailto:gstanc...@serena.com] 
Sent: Saturday, June 13, 2015 11:41 AM
To: Tomcat Users List
Subject: RE: useServerCipherSuitesOrder in 7.0.62

Thanks Konstantin,

I apologize for the shortsightness. I guess I must have had a space in the 
search dialog. Thanks for the answers!

Cheers,

George

-----Original Message-----
From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] 
Sent: Saturday, June 13, 2015 7:26 AM
To: Tomcat Users List
Subject: Re: useServerCipherSuitesOrder in 7.0.62

2015-06-13 15:36 GMT+03:00 George Stanchev <gstanc...@serena.com>:
> Hi,
>
> I was looking at [1] and it looks the new attribute is available in 7.0.61 
> onwards as per Violeta's comment. However I cannot find this new attribute in 
> the HTTP connector documentation [2] nor the changelog [3]. Can someone 
> confirm or deny the availability of this attribute 
> (useServerCipherSuitesOrder) in Tomcat 7.0.62.


#55988 [1] is mentioned in the changelog, twice (7.0.61, 7.0.60).

"useServerCipherSuitesOrder" is mentioned in [2] (in "SSL Support - BIO and 
NIO" section).

Note that this feature requires running with Java 8.


> As a follow up question, I seem to remember that 8.0.latest supports 
> OpenSSL-style list for the HTTP connector "ciphers" attribute. Does 7.0.62 
> also support this or it wasn't backported?


It was not backported.

Relevant classes are in
package org.apache.tomcat.util.net.jsse.openssl:

OpenSSLCipherConfigurationParser etc.

>
> [1] https://bz.apache.org/bugzilla/show_bug.cgi?id=55988
> [2] https://tomcat.apache.org/tomcat-7.0-doc/config/http.html
> [3] https://tomcat.apache.org/tomcat-7.0-doc/changelog.html

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to