Hello Mark,

I have some more points to mention.

The SSL is not working from my Java client which is ran on JDK5, but same
is working on JDK7.

I put some debug statement to print the SSL version client is running.

For JDK I am getting NONE, for JDK7 I am getting TLSv1

Below is my statement:

        SSLSocketFactory factory =
(SSLSocketFactory)SSLSocketFactory.getDefault();
        SSLSocket socket =
        (SSLSocket)factory.createSocket(url.getHost(), 4743);
        System.out.println( socket.getSession().getProtocol());

When I am running on JDK5 I am getting output as NONE

When I am running on JDK7 I am getting output as TLSv1

Would you please pin point the issue why it is not working in JDK5, where
can I set the TLS property.



On Tue, Jan 20, 2015 at 7:41 AM, Rajesh Biswas <rajesh...@gmail.com> wrote:

> Hello Mark,
>
> Thank you for your reply.
>
> I have de-select the User SSL 3.0 option from Control Panel ---> Java >
> Advanced Tab
>
> Still I am not able to connect.
>
> Is there any other place I need to disable SSL v.3
>
> Rajesh
>
> On Tue, Jan 20, 2015 at 12:32 AM, Mark Thomas <ma...@apache.org> wrote:
>
>> On 19/01/2015 17:33, Rajesh Biswas wrote:
>> > I am facing issues running the application in SSL with latest version of
>> > tomcat 7.57, same is working in 7.40. Below is the configuration in my
>> > server.xml file
>> >
>> > " keystorePass="xxx" clientAuth="false" sslProtocol="TLS" />
>> >
>> > I am getting ssl handshake error while I am trying to access the
>> > application through stand alone java client(I am using
>> > javax.net.ssl.HttpsURLConnection to get the connection)
>> >
>> > Same is working fine in tomcat 7.40 and also 7.56 with same
>> configuration.
>> > I am using 64 Bit JDK7
>> >
>> > Also interesting point here I am able to access through web URL using
>> > https, while I am trying to connect from Java program I am getting error
>> >
>> > Would you please suggest I am missing any configutaion?
>>
>> I'd guess your client is trying to use SSLv3 which Tomcat now disables
>> by default.
>>
>> Mark
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>

Reply via email to