https://issues.apache.org/bugzilla/show_bug.cgi?id=53394
--- Comment #1 from Mark Thomas <ma...@apache.org> --- This is a Tomcat 6 specific issue which still includes SSLv2 by default. The use of SSLv2 and that it is inherently unsafe is clearly indicated in the documentation for the APR connector. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org