Knut, Good idea on the 2.1 try. It didn't work though.
I found a link for converting the cert to something compatible with OpenSSL, so I will drudge through that murky water and see what happens as a next try. Or maybe I should spend time getting the application running 4.0.2 -- assuming that I can still use the JSSE cert with it and limit the weak ciphers? Thanks, Aaron > Back in the 2.1 days you could choose which to enable with attributes > on the HTTP tag: > <http://www.caucho.com/resin-2.1/ref/port-config.xtp#http> > You could try, with a little luck it may still work with 3.0.x > > If you want to switch to OpenSSL you can extract your JSSE key/cert, > although > last time I tried the "keytool" shipped with the JDK did not offer an > easy way. > The solution was to use the java libraries to extract the key directly > and some openssl > utility to convert to the typical ascii format. > > -Knut > > > On Tue, Dec 29, 2009 at 05:49, Aaron Freeman <aaron.free...@layerz.com > <mailto:aaron.free...@layerz.com>> wrote: > > I am a bit baffled. For PCI compliance we must restrict weak ciphers, > but I see no mechanism to do that with JSSE, which we have been using > for years. It appears we can do this with openssl on Resin 3.0.x Is > that correct? > > Does that mean I need to purchase a new certificate or can we easily > switch to openssl using the certificate we already have. > > Did the person's query about fixing JSSE's cipher-suite issue in Resin > 3.1.x get resolved in Resin 4.0.2? > > Thanks, > > Aaron > > > > > _______________________________________________ > resin-interest mailing list > resin-interest@caucho.com <mailto:resin-interest@caucho.com> > http://maillist.caucho.com/mailman/listinfo/resin-interest > > > ------------------------------------------------------------------------ > > _______________________________________________ > resin-interest mailing list > resin-interest@caucho.com > http://maillist.caucho.com/mailman/listinfo/resin-interest > _______________________________________________ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
