Tomcat deployment HTTPS+TLS 1.2+apple ATS Support

Because of the requirements of Apple ATS, Tomcat server requirements on the https+tls1.2, the front of the HTTPS, but TLS has been 1.0, even a year of running the server restarted, does not solve the problem.

Ideas are as follows:

1. Upgrade the OPENJDK to 1.8, since 1.8 Java will support TLS 1.2 by default, or 1.0

2. Tomcat Server.xml Modified:

<connector port= "443" protocol= "http/1.1" keystorefile= "/tomcat/213981844530408/213981844530408.pfx" Keystoretype= "PKCS12" keystorepass= "213981844530408" maxthreads= "" sslenabled= "true" scheme= "https" secure= "true "Ciphers=" tls_ecdhe_rsa_with_aes_128_gcm_sha256 "clientauth=" false "sslprotocol=" tlsv1+tlsv1.1+tlsv1.2 " Sslciphersuite= "ecdhe-rsa-aes128-gcm-sha256:ecdhe:ecdh:aes:high:! null:!anull:! md5:! Adh:! RC4 "/>
Restart Tomcat

Finally supported the tls1.2.

Attached:

1. The Symantec website can check the current status of TLS support:

https://cryptoreport.websecurity.symantec.com/checker/views/certCheck.jsp

2. Mac OS can use the command to check ATS support situation, command is Nscurl--ats-diagnostics--verbose interface HTTPS address

You will see a bunch of passes indicating that ATS supports success.

Left the problem, found that left a heartbleed of the loopholes.

Tomcat deployment HTTPS+TLS 1.2+apple ATS Support