James, Outbound SSL is usually handled by the underlying Java VM.
> Am 29.05.2019 um 20:57 schrieb James H. H. Lampert <jam...@touchtonecorp.com>: > > We have a customer that is running our Tomcat-based webapp, and it is > apparently having trouble accessing a Google web service. > > The error message they're getting is: > >> Unable to find acceptable protocols. isFallback=false, >> modes=[ConnectionSpec(cipherSuites=[TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, >> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, >> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, >> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, >> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, >> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, >> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, >> TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, >> TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, >> TLS_RSA_WITH_3DES_EDE_CBC_SHA], tlsVersions=[TLS_1_2, TLS_1_1, >> TLS_1_0], supportsTlsExtensions=true), >> ConnectionSpec(cipherSuites=[TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, >> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, >> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, >> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, >> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, >> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, >> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, >> TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, >> TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, >> TLS_RSA_WITH_3DES_EDE_CBC_SHA], tlsVersions=[TLS_1_0], >> supportsTlsExtensions=true), ConnectionSpec()], supported >> protocols=[TLSv1] These are the ciphers and protocols requested. Are these two different services? If that is from server and client the ciphers are OK and protocols also overlap. What strikes me though is the difference in TLS versions and supported protocols. > Is this something that could be caused by a Tomcat configuration issue? > Not really Tomcat. Java. Unless you set specific values on the connection. Or on the commandline. Could you please let us know the Java version and maybe the Connection settings? JAVA_OPTS? > -- > James H. H. Lampert > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > Peter --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
