Re: Requiring TLS with Tomcat 5.5.12

2006-03-11 Thread Bill Barker
"Jeff Krug" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > Thu, Mar 09, at 09:19:PM : Bill Barker has proclaimed: >> "Jeff Krug" <[EMAIL PROTECTED]> wrote in message >> news:[EMAIL PROTECTED] >> > Is there a way to disallow the SSL 3.0 protocol? >> > >> >> protocols="TLS" on the

Re: Requiring TLS with Tomcat 5.5.12

2006-03-11 Thread Mark Thomas
When starting a new thread (ie sending a message to the list about a new topic) please do not reply to an existing message and change the subject line. To many of the list archiving services and mail clients used by list subscribers this makes your new message appear as part of the old thread. Thi

Re: Requiring TLS with Tomcat 5.5.12

2006-03-10 Thread Jeff Krug
Thu, Mar 09, at 09:19:PM : Bill Barker has proclaimed: > "Jeff Krug" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] > > Is there a way to disallow the SSL 3.0 protocol? > > > > protocols="TLS" on the tag. I added this, but it did not seem to alter the behavior. Here is my conne

Re: Requiring TLS with Tomcat 5.5.12

2006-03-09 Thread Bill Barker
"Jeff Krug" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > I have a Tomcat 5.5.12 install that is working well (it is a stand-alone > install under Windows 2003 server). I was given a request to make this > install fully FIPS 140-2 compliant, specifically requiring that Tomcat >

Requiring TLS with Tomcat 5.5.12

2006-03-09 Thread Jeff Krug
I have a Tomcat 5.5.12 install that is working well (it is a stand-alone install under Windows 2003 server). I was given a request to make this install fully FIPS 140-2 compliant, specifically requiring that Tomcat not allow SSL 3.0 protocol connections (TLS only). My config specifies sslProtoco