Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Sverre Moe
H_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 2014-05-26 20:09 GMT+02:00 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Tim, > > On 5/25/14, 9:34 PM, Tim Whittington wrote: > > > > On 21/0

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-26 Thread Sverre Moe
ed to use JSSE since I am running SLES (which has an old version of OpenSSL). 2014-05-26 11:25 GMT+02:00 Tim Whittington : > > On 26/05/2014, at 6:58 pm, Sverre Moe wrote: > > >> Documentation aside, none of these cipher-suites are supported in Oracle > > Java 7. &

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-25 Thread Sverre Moe
56_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 But Tomcat will never choose a GCM cipher because they are last in the list. 2014-05-26 3:34 GMT+02:00 Tim Whittington : > > On 21/05/2014, at 10:21 pm

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Sverre Moe
: > On 24/05/2014 1:15 AM, "Sverre Moe" wrote: > > > > NIO does support them according to the java documentation. > > I was refering to cipher order and tomcat7 connector documentation where > only the apr connector supports the option SSLHonorCipherOrder > &

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Sverre Moe
10:00 GMT+02:00 Igor Cicimov : > On 23/05/2014 5:43 PM, "Sverre Moe" wrote: > > > > I am using the following ciphers in Tomcat: > > > > ciphers="TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA2

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Sverre Moe
> PO Box 31 > Canowindra NSW 2804 > > 02 6344 1100 > http://machaira.com.au/ > > > > On 23 May 2014 16:13, Sverre Moe wrote: > > > I have found out that the connector can use these ciphers, but Chromium > > can't. > > I wrote a small Java

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-22 Thread Sverre Moe
6_GCM and no SHA384. 2014-05-23 0:53 GMT+02:00 Igor Cicimov : > On 21/05/2014 8:22 PM, "Sverre Moe" wrote: > > > > I installed Tomcat-7 7.0.42 in OpenSUSE 13.1, configured support for > > TLSv1.2. I then configured a list of strong ciphers only, that I want

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-21 Thread Sverre Moe
)112TLS_RSA_WITH_RC4_128_SHA (0x5)128TLS_RSA_WITH_RC4_128_MD5 (0x4)128(*) Cannot be used for Forward Secrecy because they require DSS keys, which are effectively limited to 1024 bits. 2014-05-21 21:24 GMT+02:00 Sverre Moe : > Setting only these ciphers in the JSSE connec

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-21 Thread Sverre Moe
Sv1.2 Application Data, length = 11472 If I also add the following ciphers: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 Then my little Java program uses only these and not the GCM ciphers. 2014-05-21 12:21 GMT+02:00 Sverre Moe : > I installed Tomcat-7 7.0.42 in OpenS

Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-21 Thread Sverre Moe
I installed Tomcat-7 7.0.42 in OpenSUSE 13.1, configured support for TLSv1.2. I then configured a list of strong ciphers only, that I wanted to use. I have tried running Tomcat with Java 7 and Java 8. Both of these should support CBC_SHA256 and CBC_SHA384, but only Java 8 supports GCM_SHA384. I