Tomcat deployment HTTPS+TLS 1.2+apple ATS Support

Source: Internet
Author: User

Because of the requirements of Apple ATS, Tomcat server requirements on the https+tls1.2, the front of the HTTPS, but TLS has been 1.0, even a year of running the server restarted, does not solve the problem.

Ideas are as follows:

1. Upgrade the OPENJDK to 1.8, since 1.8 Java will support TLS 1.2 by default, or 1.0

2. Tomcat Server.xml Modified:

<connector port= "443" protocol= "http/1.1" keystorefile= "/tomcat/213981844530408/213981844530408.pfx" Keystoretype= "PKCS12" keystorepass= "213981844530408" maxthreads= "" sslenabled= "true" scheme= "https" secure= "true "Ciphers=" tls_ecdhe_rsa_with_aes_128_gcm_sha256 "clientauth=" false "sslprotocol=" tlsv1+tlsv1.1+tlsv1.2 " Sslciphersuite= "ecdhe-rsa-aes128-gcm-sha256:ecdhe:ecdh:aes:high:! null:!anull:! md5:! Adh:! RC4 "/>
Restart Tomcat

Finally supported the tls1.2.

Attached:

1. The Symantec website can check the current status of TLS support:

https://cryptoreport.websecurity.symantec.com/checker/views/certCheck.jsp

2. Mac OS can use the command to check ATS support situation, command is Nscurl--ats-diagnostics--verbose interface HTTPS address

You will see a bunch of passes indicating that ATS supports success.

Left the problem, found that left a heartbleed of the loopholes.

Tomcat deployment HTTPS+TLS 1.2+apple ATS Support

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.