https://issues.apache.org/bugzilla/show_bug.cgi?id=54406

--- Comment #1 from Christopher Schultz <ch...@christopherschultz.net> ---
+1

There was a post to the users' list recently where a user attempted to
configure JSSE using OpenSSL-style cipher names. The result was evidently that
the Connector used the default list of ciphers. I assert that this is a
security problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to