Re: Cannot Specify sslEnabledProtocols

2014-10-17 Thread Mark Thomas
On 16/10/2014 23:59, Jason Schwanz wrote: > Cut from server.xml > == > acceptCount="100" > ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_W

Re: Cannot Specify sslEnabledProtocols

2014-10-16 Thread Jason Schwanz
Cut from server.xml == >From catalina.out == Oct 16, 2014 5:16:42 AM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr

Re: Cannot Specify sslEnabledProtocols

2014-10-16 Thread Mark Thomas
On 16/10/2014 23:46, Jason Schwanz wrote: > I'm attempting to disable SSLv3 by specifying > sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" > in my HTTP connector, but it is not disabling it. Looking at catalina.out I > see this logged warning: > > WARNING: [SetAllPropertiesRule]{Server/Service/Connec

Cannot Specify sslEnabledProtocols

2014-10-16 Thread Jason Schwanz
I'm attempting to disable SSLv3 by specifying sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" in my HTTP connector, but it is not disabling it. Looking at catalina.out I see this logged warning: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslEnabledProtocols' to 'TLSv1,