On Thu, Oct 11, 2018 at 4:52 PM Christopher Schultz < ch...@christopherschultz.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Усманов, > > On 10/10/18 11:12 AM, Усманов Азат Анварович wrote: > > Thanks Cristopher, I already did. All that´s left is to get the > > latest patch backported to tomcat 7 > > For APR, it shouldn't be too much of an issue; it's just about getting > a qualifying tcnative build into tc7 and a little plumbing code. > > My *guess* right now is that Tomcat 7 will not get any back-ports for > NIO[2] for either JSSE or OpenSSL, so Tomcat 7 will have incomplete > TLSv1.3 support. > Tomcat 7 cannot get NIO2 (it needs Java 7), and it didn't get the OpenSSL engine either. So APR and vanilla JSSE with NIO (or java.io) are the only possibilities. Rémy