Hi All,

I am in process of migrating my application from tomcat 7.0.70 to 8.5.5 and 
getting some issues

My connector settings of 7.0.70 is
<Connector port="443"
                 protocol="HTTP/1.1"
                 SSLEnabled="true"
                 maxThreads="150"
                 scheme="https"
                 secure="true"
                 keystoreFile="conf/my-server.keystore"
                 keystorePass="changeit"
                 keystoreType="jks"
                 compression="on"
                 
compressableMimeType="text/html,text/xml,text/plain,text/javascript,text/css,application/x-javascript,application/javascript"
                 address="<address>"
                 
ciphers="TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA"
                 clientAuth="false"
                 sslProtocol="TLS"
                 sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"
                 maxPostSize="10485760" />

And connector settings of 8.5.5 is

<Connector port="443"
               protocol="org.apache.coyote.http11.Http11NioProtocol"
               SSLEnabled="true"
               maxThreads="150"
               scheme="https"
               secure="true"
               compression="on"
               
compressableMimeType="text/html,text/xml,text/plain,text/javascript,text/css,application/x-javascript,application/javascript"
               address="<address>"
               maxPostSize="10485760" >
                            <SSLHostConfig sslProtocol="TLS"
                                                          
protocols="TLSv1,TLSv1.1,TLSv1.2"
                                                         
ciphers="TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA">
                                           <Certificate
                                                          
certificateKeystoreFile="conf/my-server.keystore"
                                                          
certificateKeystorePassword="changeit"
                                                          
certificateKeystoreType="jks"
                                                          
certificateKeyAlias="tomcat"
certificateVerification="true" />
                            </SSLHostConfig>
              </Connector>


Things are working fine with tomcat 7.0.70 but with tomcat 8.5.5, while 
accessing application in browser, I am getting message
"This site can't provide a secure connection
localhost uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH"

What is the mistake I am doing in migration.

Please help

Regards
Manish

Reply via email to