Re: Tomcat VAPT Closure

2023-04-24 Thread Mark Eggers
Pratik, On 4/24/2023 10:20 PM, PRATIK HUMNABADKAR wrote: Hi, Server.xml

RE: Tomcat VAPT Closure

2023-04-24 Thread PRATIK HUMNABADKAR
Hi, Server.xml

Re: Tomcat VAPT Closure

2023-04-24 Thread Mark Eggers
Pratik, On 4/24/2023 10:09 PM, PRATIK HUMNABADKAR wrote: Hi, We need Tomcat support assistance for closure of our VAPT points for disabling SSL TLS 1.0 and 1.1 Please guide us by arranging concerned technician with us for closure. Tomcat version: 9.0.62 Operating system: Linux We tried disa

Tomcat VAPT Closure

2023-04-24 Thread PRATIK HUMNABADKAR
Hi, We need Tomcat support assistance for closure of our VAPT points for disabling SSL TLS 1.0 and 1.1 Please guide us by arranging concerned technician with us for closure. Tomcat version: 9.0.62 Operating system: Linux We tried disabling in below way. Changes done in server.xml [cid:image00

Tomcat Native 1.2.30 -- Windows 2016 TLSv1.3 support?

2023-04-24 Thread Ragosta, Vincent
Hello all, We have an application packaged with Tomcat Native 1.2.30, which, per the following, the Windows binaries were built using OpenSSL 1.1.1k: https://www.mail-archive.com/dev@tomcat.apache.org/msg152993.html However, per Microsoft, Windows 2016 does not support TLSv1.3: https://learn.m

RE: OT: hsts in Tomcat 9.0.73

2023-04-24 Thread jonmcalexander
In this case it's only internally accessible, not public. Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urband

Re: OT: hsts in Tomcat 9.0.73

2023-04-24 Thread Peter Kreuser
Jon, Peter Kreuser Liebknechtstr. 83 63303 Dreieich-Sprendlingen phone: +49 6103 9880863 fax: +49 6103 9886215 mobile: +49 172 6649346 email: pe...@kreuser.name web: www.kreuser.name key: http://www.kreuser.name/PGP_Public_Key.txt smime: http://www.kreuser.name/SMIME.cer > Am 24.04.2023 um 15:39

RE: OT: hsts in Tomcat 9.0.73

2023-04-24 Thread jonmcalexander
Thank you for all the good insights Olaf. I am like you, I prefer to put a reverse proxy in front of my Tomcat instances as well. Unfortunately it is Qualsys that is calling this particular system out, so have to figure out how best to fix it. Thanks again. Dream * Excel * Explore * Inspire Jo

RE: java.lang.InternalError: Unexpected CryptoAPI failure generating seed

2023-04-24 Thread Harri Pesonen
Thanks. This has quite good explanation of the issue: https://www.baeldung.com/java-security-egd It seems that there is no easy workaround for this in Windows at least. Problem is with entropy, the native Windows random number generator does not always have enough randomness available. I think th