Re: JSSE with OpenSSL and certificate chains

2016-03-30 Thread Rémy Maucherat
2016-03-30 10:38 GMT-05:00 Mark Thomas : > I'm currently looking (again) at Tomcat's default TLS configuration with > SSLLabs. The initial results are promising. A few tweaks has got the > default Tomcat 9 + NIO with JSSE to a grade A. > > I'm currently looking at Tomcat 9 + NIO with OpenSSL. The

JSSE with OpenSSL and certificate chains

2016-03-30 Thread Mark Thomas
I'm currently looking (again) at Tomcat's default TLS configuration with SSLLabs. The initial results are promising. A few tweaks has got the default Tomcat 9 + NIO with JSSE to a grade A. I'm currently looking at Tomcat 9 + NIO with OpenSSL. The grade is capped at B because we don't send the full