java - Cipher Options In Tomcat -
i see 2 ways use cipher , tls1_2 tomcat.
add java startup options
-dhttps.protocols=tlsv1.2 -dhttps.ciphersuites=tls_ecdhe_rsa_with_aes_128_cbc_sha256
or
edit server.xml, in connector block
<connector sslprotocol="tlsv1.2" ciphers="tls_ecdhe_rsa_with_aes_128_cbc_sha256" ....>
my question is, both required? 1 trump other? 1 preferred?
if choose server.xml, sslenabled="false" have set "true".
Comments
Post a Comment