https://issues.apache.org/bugzilla/show_bug.cgi?id=48192
Summary: Allow to specify the SSLSocket class in connector tag of server.xml Product: Tomcat 6 Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: Connectors AssignedTo: dev@tomcat.apache.org ReportedBy: hau...@acm.org in the connector as per http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Edit%20the%20Tomcat%20Configuration%20File , it should be possible to define a FQDN of a class implementing javax.net.ssl.SSLSocket This way it might be possible to implement one's own SSLSocket subclass. String org.apache.tomcat.util.net.jsse.JSSEImplementation.SSLSocketClass = "javax.net.ssl.SSLSocket" Must be enhanced to honor such a "sslSocketClass" attribute. This might allow to ban the currently harmful "kickstartHandshake()" renegotiation method as described in Bug 48158 comment 5 -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org