Re: cannot disable SSL v3 [SOLVED]

2014-10-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Deepak, On 10/17/14 12:21 AM, dku...@ccilindia.co.in wrote: > I have removed SSL [cipher] from my configuration. and its working. > Please let me know is this correct way to solve this. > > I am running Tomcat 7.0.22 scheme="https" secure="true"

Re: cannot disable SSL v3 [SOLVED]

2014-10-16 Thread dkumar
Hello all, I have removed SSL cypher from my configuration. and its working. Please let me know is this correct way to solve this. I am running Tomcat 7.0.22 I believe some village somewhere was missing somebody :) > > Reading the tomcat/apr doc > (http://tomcat.

Re: cannot disable SSL v3 [SOLVED]

2014-10-16 Thread David kerber
On 10/16/2014 2:38 PM, Vu Pham wrote: I believe some village somewhere was missing somebody :) Reading the tomcat/apr doc (http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support) , I found that I have to use SSLProtocol instead of sslProtocol. Tomcat's case-sensitivity has bitten

Re: cannot disable SSL v3 [SOLVED]

2014-10-16 Thread Vu Pham
I believe some village somewhere was missing somebody :) Reading the tomcat/apr doc (http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support) , I found that I have to use SSLProtocol instead of sslProtocol. After making that change, SSLv3 disappear. Thanks, Vu On 10/16/2014 08: