Re: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Christopher Schultz
RE: Anyway to >> enable just all TLS protocols in APR connector? >> >>> -Original Message- From: Christopher Schultz >>> [mailto:ch...@christopherschultz.net] Sent: Friday, October 17, >>> 2014 12:26 PM To: Tomcat Users List Subject: Re: Anyway to

RE: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Jeffrey Janner
> -Original Message- > From: André Warnier [mailto:a...@ice-sa.com] > Sent: Friday, October 17, 2014 3:59 PM > To: Tomcat Users List > Subject: Re: Anyway to enable just all TLS protocols in APR connector? > > Bob Hall wrote: > > On Friday, October 17, 2

Re: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread André Warnier
Bob Hall wrote: On Friday, October 17, 2014 1:05 PM, Jeffrey Janner wrote: With baited breath, but not holding it. Should be "bated breath". But perhaps, dear Bob, Jeffrey meant exactly what he wrote. Having posted to the list and expecting a response, he rested with a glass of milk,

Re: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Bob Hall
On Friday, October 17, 2014 1:05 PM, Jeffrey Janner wrote: > With baited breath, but not holding it. Should be "bated breath". - Bob

RE: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Jeffrey Janner
> -Original Message- > From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Sent: Friday, October 17, 2014 3:04 PM > To: 'Tomcat Users List' > Subject: RE: Anyway to enable just all TLS protocols in APR connector? > > > -Original Message-

RE: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Jeffrey Janner
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Friday, October 17, 2014 12:26 PM > To: Tomcat Users List > Subject: Re: Anyway to enable just all TLS protocols in APR connector? > > -BEGIN PGP SIGNED MESSAG

Re: Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 10/17/14 1:12 PM, Jeffrey Janner wrote: > Documentation for the APR connector says setting SSLProtocol="all" > (the default) enables TLSv1+SSLv3, but actually enables TLSv1.1 > and TLSv1.2 as well. Why do you think that's the case? >

Anyway to enable just all TLS protocols in APR connector?

2014-10-17 Thread Jeffrey Janner
Documentation for the APR connector says setting SSLProtocol="all" (the default) enables TLSv1+SSLv3, but actually enables TLSv1.1 and TLSv1.2 as well. However, it only seems to accept SSLProtocol strings that includes TLSv1, SSLv2, SSLv3 or their combinations. In other words, there doesn't seem