java - Cipher Options In Tomcat -


i see 2 ways use cipher , tls1_2 tomcat.

add java startup options

-dhttps.protocols=tlsv1.2 -dhttps.ciphersuites=tls_ecdhe_rsa_with_aes_128_cbc_sha256 

or

edit server.xml, in connector block

<connector sslprotocol="tlsv1.2" ciphers="tls_ecdhe_rsa_with_aes_128_cbc_sha256" ....> 

my question is, both required? 1 trump other? 1 preferred?

if choose server.xml, sslenabled="false" have set "true".


Comments

Popular posts from this blog

jOOQ update returning clause with Oracle -

java - Warning equals/hashCode on @Data annotation lombok with inheritance -

java - BasicPathUsageException: Cannot join to attribute of basic type -