Re: Disabling SSLv3 with Tomcat ARP/Native but still retaining support for TLS 1.1 and TLS 1.2

2014-10-15 Thread James Drews
That isn't working for tomcat 6, it will only accept TLSv1 for the SSLProtocol entry, and that results in in using TLS1.0 only. On 10/15/2014 7:48 AM, Giles Coochey wrote: On 15/10/2014 13:42, John Blaut wrote: Hi Following the recent announcement of the SSLv3 POODLE vulnerability (CVE-2014-3

Tomcat 6 APR SSL Issue

2014-10-14 Thread James Drews
Hi, I have a question that may be a bug, or I'm just not doing something right (I'll happily believe either). Configuration: Tomcat 6.0 running on Windows Server The tcnative-1.dll is the latest from the download site http://tomcat.apache.org/download-native.cgi Item #1 In our tomcat server.