https://bz.apache.org/bugzilla/show_bug.cgi?id=62748
--- Comment #20 from Christopher Schultz <ch...@christopherschultz.net> --- Using OpenJDK 11, a simple https:// protocol test works for both configurations "TLSv1.2+TLSv1.3" and simply "TLSv1.3". In the former case, Firefox/Chrome connect using TLSv1.2. For the latter case, Firefox/Chrome fail with SSL_ERROR_PROTOCOL_VERSION_ALERT or ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors. ssltest successfully negotiates both TLS_AES_128_GCM_SHA256 and TLS_AES_256_GCM_SHA384. Qualys/SSLLabs client test[1] confirms that both of these ciphers are supported by my browser. [1] https://www.ssllabs.com/ssltest/viewMyClient.html -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org