Re: Tomcat v8.5.3 SSL Configuration?

[venkatesham nalla]

Hi,


I am trying to configure Tomcat v8.5.3 with TLSv1.1 and TLSv1.2, but it is not 
working on AIX. It is only supporting TLSv1. I have added the 
-Dcom.ibm.jsse2.overrideDefaultTLS=true as well.


Java version 1.7.0 IBM J9 VM SR1.


Tomcat 8.5.3 SSL Configuration

-----------------------------------------

<Connector port="58043" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150"
                SSLEnabled="true" scheme="https" secure="true"
        >
        <SSLHostConfig>
            <Certificate
                        protocols="-TLSv1"
                        certificateKeystoreFile="..."
                        certificateKeystorePassword="changeit"
                        certificateKeyAlias="..."
                        sslProtocol="TLS"
                         />
        </SSLHostConfig>
    </Connector>



Tomcat 7.0.39 is working with the following config on the same machine with 
same JDK

--------------------------------------------------------------------------------------------------------------

 <Connector port="30143" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               sslEnabledProtocols="TLSv1.2,TLSv1.1"
               clientAuth="false" sslProtocol="SSL"
               keystoreFile="..." keystorePa
ss="..." />

appreciate your time and help.


Thanks,

Venkat