RE: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Caldarale, Charles R
> From: Rajat Gupta05 [mailto:rajat_gupt...@infosys.com] > Subject: RE: SSL ciphers supported by Tomcat version 5.0 > > Please see I am looking for FIPS complaint which may not be FIPS > approved. See my previous post about JRE/JDK 6 security enhancements. Also note that Tomcat 5

Re: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Mark Thomas
Caldarale, Charles R wrote: >> From: Mark Thomas [mailto:ma...@apache.org] >> Subject: Re: SSL ciphers supported by Tomcat version 5.0 >> >> JSSE isn't FIPS compliant. > > JRE 6 is not FIPS compliant out of the box, but it can be made so: > http://java.

RE: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Caldarale, Charles R
> From: Mark Thomas [mailto:ma...@apache.org] > Subject: Re: SSL ciphers supported by Tomcat version 5.0 > > JSSE isn't FIPS compliant. JRE 6 is not FIPS compliant out of the box, but it can be made so: http://java.sun.com/javase/6/docs/technotes/guides/security/enhan

RE: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Rajat Gupta05
Repost -Original Message- From: Rajat Gupta05 [mailto:rajat_gupt...@infosys.com] Sent: July 16, 2009 4:45 PM To: Tomcat Users List Subject: RE: SSL ciphers supported by Tomcat version 5.0 Now my next question is how to use the FIPS complaint ciphers with Tomcat. Please see I am looking

RE: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Rajat Gupta05
[mailto:ma...@apache.org] Sent: July 16, 2009 4:22 PM To: Tomcat Users List Subject: Re: SSL ciphers supported by Tomcat version 5.0 Rajat Gupta05 wrote: > Hi, > > TLS_RSA_WITH_AES_128_CBC_SHA > TLS_DHE_RSA_WITH_AES_128_CBC_SHA > TLS_DHE_DSS_WITH_AES_128_CBC_SHA > > Are the abo

Re: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Mark Thomas
E isn't FIPS compliant. Mark > > Thanks > Rajat > -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: July 16, 2009 4:01 PM > To: Tomcat Users List > Subject: Re: SSL ciphers supported by Tomcat version 5.0 > > Rajat Gupta05 wrote:

RE: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Rajat Gupta05
to:ma...@apache.org] Sent: July 16, 2009 4:01 PM To: Tomcat Users List Subject: Re: SSL ciphers supported by Tomcat version 5.0 Rajat Gupta05 wrote: > Hi, > > > 1. Which all SSL ciphers are supported by Tomcat, is it the ciphers > supported by Sun JSSE? Yes. > 2. A

Re: SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Mark Thomas
Rajat Gupta05 wrote: > Hi, > > > 1. Which all SSL ciphers are supported by Tomcat, is it the ciphers > supported by Sun JSSE? Yes. > 2. Are the highlighted ones will only come in picture when using TLS > protocol? Highlighting doesn't work too well when people use plain text to vie

SSL ciphers supported by Tomcat version 5.0

2009-07-16 Thread Rajat Gupta05
Hi, 1. Which all SSL ciphers are supported by Tomcat, is it the ciphers supported by Sun JSSE? I came across the following list: SSL_RSA_WITH_RC4_128_MD5 SSL_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA SSL_RSA_WITH_3