Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-10 Thread James H. H. Lampert
On 8/10/22 6:50 AM, Brian Wolfe wrote: You can disable the protocols at the java level in the java.security file jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, TLSv1, TLSv1.1 I think that's exactly what I did on "Customer Box #1" (and forgot to document having done). Bec

Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-10 Thread James H. H. Lampert
On 8/10/22 8:52 AM, Jason Hall wrote: If you have another network device in front of your server - that could be what is trumping the app server's settings. I'd planned on investigating that as well. But it *looks* like the cert I'm seeing matches the cert in the keystore their Tomcat is usi

Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-10 Thread Jason Hall
hanks, Jason - Original Message - From: "Brian Wolfe" To: "Tomcat Users List" Sent: Wednesday, August 10, 2022 9:50:01 AM Subject: Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2" You can disable the protocols at the j

Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-10 Thread Brian Wolfe
ht- > > Von: logo > > Gesendet: Mittwoch, 10. August 2022 10:22 > > An: Tomcat Users List > > Betreff: Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I > have > > sslProtocol="TLSv1.2" > > > > Thomas, > > >

AW: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-10 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello Peter, > -Ursprüngliche Nachricht- > Von: logo > Gesendet: Mittwoch, 10. August 2022 10:22 > An: Tomcat Users List > Betreff: Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have > sslProtocol="TLSv1.2" > > Thomas, > > Am 2

Re: AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-10 Thread logo
Thomas, Am 2022-08-10 08:59, schrieb Thomas Hoffmann (Speed4Trade GmbH): Hello, -Ursprüngliche Nachricht- Von: Peter Kreuser Gesendet: Mittwoch, 10. August 2022 08:44 An: Tomcat Users List Betreff: Re: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

AW: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have sslProtocol="TLSv1.2"

2022-08-09 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, > -Ursprüngliche Nachricht- > Von: Peter Kreuser > Gesendet: Mittwoch, 10. August 2022 08:44 > An: Tomcat Users List > Betreff: Re: SSLLabs scan shows TLSv1.0 and TLSv1.1 even though I have > sslProtocol="TLSv1.2" > > > > James, > > the most recent connector attribute is "prot