Author: fschumacher Date: Sun Mar 13 19:36:51 2016 New Revision: 1734844 URL: http://svn.apache.org/viewvc?rev=1734844&view=rev Log: honorCipherOrder has to default to false, as it is not available with java 7.
Modified: tomcat/tc8.5.x/trunk/java/org/apache/tomcat/util/net/SSLHostConfig.java Modified: tomcat/tc8.5.x/trunk/java/org/apache/tomcat/util/net/SSLHostConfig.java URL: http://svn.apache.org/viewvc/tomcat/tc8.5.x/trunk/java/org/apache/tomcat/util/net/SSLHostConfig.java?rev=1734844&r1=1734843&r2=1734844&view=diff ============================================================================== --- tomcat/tc8.5.x/trunk/java/org/apache/tomcat/util/net/SSLHostConfig.java (original) +++ tomcat/tc8.5.x/trunk/java/org/apache/tomcat/util/net/SSLHostConfig.java Sun Mar 13 19:36:51 2016 @@ -84,7 +84,7 @@ public class SSLHostConfig { private String ciphers = "HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA"; private LinkedHashSet<Cipher> cipherList = null; private List<String> jsseCipherNames = null; - private boolean honorCipherOrder = true; + private boolean honorCipherOrder = false; private Set<String> protocols = new HashSet<>(); // JSSE private String keyManagerAlgorithm = KeyManagerFactory.getDefaultAlgorithm(); --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org