I have a web service which is running on Tomcat 6.0, Java 7. The Connector uses the JSSE configuration. Below is what the connector in the server.xml file looks like, with a few modifications:
<Connector port="a numeric port number" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" SSLEnabled="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"
URIEncoding="UTF-8" keystorePass="aStringValue"
keystoreFile="c:\crt\aFile.jks" keyAlias="anAlias"
keyStoreType="JKS" />
I' Having trouble with getting the SSLProtocol to work in a fashion that would disable the POODLE vulnerable SSLv3, I have also tried having it as "TLS" and separately have
sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1"
as well as
sslEnabledProtocols="TLSv1.2+TLSv1.1+TLSv1"
after the SSLProtocol, but neither seem to have worked. And yes, I did remember to restart Tomcat after the server.xml changes. Can anyone spot what I'm missing here? All help highly appreciated.