You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "rugman66 ." <jb...@gmail.com> on 2020/03/05 18:30:11 UTC

Tomcat won't use TLSv1.2

Hello,



I have both Apache and Tomcat running on the same RHEL. I have successfully
configured Apache to use OpenSSL TLSv1.2, but I cannot get Tomcat to use
TLSv1.2. Tomcat for some reason

will only use TLV 1.0, and that is no good. No matter what parameter I set
in the server.xml sslProtocol directive it won’t change. Seems like it’s
getting that directive somewhere else but I can't locate.



<Connector

         port="8443"

         scheme="https"

         secure="true"

         protocol="org.apache.coyote.http11.Http11AprProtocol"

         SSLEnabled="true"

         SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"


SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"


SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"

         SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"

         SSLHonorCipherOrder="true"

         maxThreads="150"

         clientAuth="false"

         sslProtocol="-all +TLSv1.2"

                                            />



OpenSSL 1.0.2d

Tomcat 7.0.39 (I know it’s old, but it's what I have to work with at this
time)


Thank you for any insight.

-John

RE: Tomcat won't use TLSv1.2

Posted by "Phoenix, Merka" <me...@hpe.com>.
> .<in...@flyingfischer.ch>  wrote:

>>On 2020-03-05 at 23:10  rugman66 wrote:
> On Thu, Mar 5, 2020 at 10:44 AM info@flyingfischer.ch
> <in...@flyingfischer.ch> wrote:
>> Try SSLProtocol="TLSv1.2" (mind the case) instead of sslProtocol="-all
>> +TLSv1.2".
>>
>> Had this issue too. The connector parameters for SSL are a huge mess and
>> have been changed constantly.
>>
>> Best
>> Markus
>>
>> On 2020-03-05 at 19:30 rugman66 wrote:
>>> Hello,
>>>
>>> I have both Apache and Tomcat running on the same RHEL. I have successfully
>>> configured Apache to use OpenSSL TLSv1.2, but I cannot get Tomcat to use
>>> TLSv1.2. Tomcat for some reason
>>>
>>> will only use TLV 1.0, and that is no good. No matter what parameter I set
>>> in the server.xml sslProtocol directive it won’t change. Seems like it’s
>>> getting that directive somewhere else but I can't locate.
>>>
>>> <Connector  port="8443"
>>>          scheme="https"
>>>          secure="true"
>>>          protocol="org.apache.coyote.http11.Http11AprProtocol"
>>>          SSLEnabled="true"
>>>          SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
>>>          SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
>>>           SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
>>>          SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
>>>          SSLHonorCipherOrder="true"
>>>          maxThreads="150"
>>>          clientAuth="false"
>>>          sslProtocol="-all +TLSv1.2"  />
>>>
>>>
>>>
>>> OpenSSL 1.0.2d
>>>
>>> Tomcat 7.0.39 (I know it’s old, but it's what I have to work with at this
>>> time)
>>>
>>>
>>> Thank you for any insight.
>>>
>>> -John
>>>
> Sorry, that last reply sent before I was done for some reason.
>
>> Thanks Markus,
>>
>> One final issue. One version of the URL is still using TLS 1.0, and I
>> need to disable or force it to TLS v1.2 and can't find where to do
>> that.
>>
>> https ://   	server.domain.com    		(TLSv 1.2)
>> https ://   	server.domain.com/foo    	(Apache proxy TLSv1.2
>> https ://   	server.domain.com:8443     	(TLS 1.0)
>>
>> Thanks
>> -John
>>

> These three URLs do use two different connectors: on Port 443 and on Port 8443.
> Make sure you have configured both connectors accordingly.
> Best
> Markus

---
Keep in mind that the Java JVM may need help as well (depending on which version of the Java JVM runtime is hosting the Apache Tomcat).

Oracle documentation covers this topic well at the URL
See: https://www.java.com/en/configure_crypto.html
https:// www. java .com /en/configure_crypto.html

Scroll down to the paragraph "Changing default TLS protocol version for client end points : TLS 1.0 to TLS 1.2".

Cheers!

Simba
Engineering


Re: Tomcat won't use TLSv1.2

Posted by "info@flyingfischer.ch" <in...@flyingfischer.ch>.


Am 05.03.20 um 23:10 schrieb rugman66 .:
> On Thu, Mar 5, 2020 at 10:44 AM info@flyingfischer.ch
> <in...@flyingfischer.ch> wrote:
>> Try SSLProtocol="TLSv1.2" (mind the case) instead of sslProtocol="-all
>> +TLSv1.2".
>>
>> Had this issue too. The connector parameters for SSL are a huge mess and
>> have been changed constantly.
>>
>> Best
>> Markus
>>
>> Am 05.03.20 um 19:30 schrieb rugman66 .:
>>> Hello,
>>>
>>>
>>>
>>> I have both Apache and Tomcat running on the same RHEL. I have successfully
>>> configured Apache to use OpenSSL TLSv1.2, but I cannot get Tomcat to use
>>> TLSv1.2. Tomcat for some reason
>>>
>>> will only use TLV 1.0, and that is no good. No matter what parameter I set
>>> in the server.xml sslProtocol directive it won’t change. Seems like it’s
>>> getting that directive somewhere else but I can't locate.
>>>
>>>
>>>
>>> <Connector
>>>
>>>          port="8443"
>>>
>>>          scheme="https"
>>>
>>>          secure="true"
>>>
>>>          protocol="org.apache.coyote.http11.Http11AprProtocol"
>>>
>>>          SSLEnabled="true"
>>>
>>>          SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
>>>
>>>
>>> SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
>>>
>>>
>>> SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
>>>
>>>          SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
>>>
>>>          SSLHonorCipherOrder="true"
>>>
>>>          maxThreads="150"
>>>
>>>          clientAuth="false"
>>>
>>>          sslProtocol="-all +TLSv1.2"
>>>
>>>                                             />
>>>
>>>
>>>
>>> OpenSSL 1.0.2d
>>>
>>> Tomcat 7.0.39 (I know it’s old, but it's what I have to work with at this
>>> time)
>>>
>>>
>>> Thank you for any insight.
>>>
>>> -John
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
> Sorry, that last reply sent before I was done for some reason.
>
> Thanks Markus,
>
> One final issue. One version of the URL is still using TLS 1.0, and I
> need to disable or force it to TLS v1.2 and can't find where to do
> that.
>
> https://server.domain.com  (TLSv 1.2)
> https://server.domain.com/foo (Apache proxy TLSv1.2
> https://server.domain.com:8443 (TLS 1.0)
>
> Thanks
> -John
>

These three URLs do use two different connectors: on Port 443 and on
Port 8443.

Make sure you have configured both connectors accordingly.

Best
Markus




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat won't use TLSv1.2

Posted by "rugman66 ." <jb...@gmail.com>.
On Thu, Mar 5, 2020 at 10:44 AM info@flyingfischer.ch
<in...@flyingfischer.ch> wrote:
>
> Try SSLProtocol="TLSv1.2" (mind the case) instead of sslProtocol="-all
> +TLSv1.2".
>
> Had this issue too. The connector parameters for SSL are a huge mess and
> have been changed constantly.
>
> Best
> Markus
>
> Am 05.03.20 um 19:30 schrieb rugman66 .:
> > Hello,
> >
> >
> >
> > I have both Apache and Tomcat running on the same RHEL. I have successfully
> > configured Apache to use OpenSSL TLSv1.2, but I cannot get Tomcat to use
> > TLSv1.2. Tomcat for some reason
> >
> > will only use TLV 1.0, and that is no good. No matter what parameter I set
> > in the server.xml sslProtocol directive it won’t change. Seems like it’s
> > getting that directive somewhere else but I can't locate.
> >
> >
> >
> > <Connector
> >
> >          port="8443"
> >
> >          scheme="https"
> >
> >          secure="true"
> >
> >          protocol="org.apache.coyote.http11.Http11AprProtocol"
> >
> >          SSLEnabled="true"
> >
> >          SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
> >
> >
> > SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
> >
> >
> > SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
> >
> >          SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
> >
> >          SSLHonorCipherOrder="true"
> >
> >          maxThreads="150"
> >
> >          clientAuth="false"
> >
> >          sslProtocol="-all +TLSv1.2"
> >
> >                                             />
> >
> >
> >
> > OpenSSL 1.0.2d
> >
> > Tomcat 7.0.39 (I know it’s old, but it's what I have to work with at this
> > time)
> >
> >
> > Thank you for any insight.
> >
> > -John
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>

Sorry, that last reply sent before I was done for some reason.

Thanks Markus,

One final issue. One version of the URL is still using TLS 1.0, and I
need to disable or force it to TLS v1.2 and can't find where to do
that.

https://server.domain.com  (TLSv 1.2)
https://server.domain.com/foo (Apache proxy TLSv1.2
https://server.domain.com:8443 (TLS 1.0)

Thanks
-John

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat won't use TLSv1.2

Posted by "rugman66 ." <jb...@gmail.com>.
Thanks Markus. Now a different issue is occurring. One specific version of
the URL is using TLS 1.0.

https://server.domain.com

On Thu, Mar 5, 2020 at 10:44 AM info@flyingfischer.ch <in...@flyingfischer.ch>
wrote:

> Try SSLProtocol="TLSv1.2" (mind the case) instead of sslProtocol="-all
> +TLSv1.2".
>
> Had this issue too. The connector parameters for SSL are a huge mess and
> have been changed constantly.
>
> Best
> Markus
>
> Am 05.03.20 um 19:30 schrieb rugman66 .:
> > Hello,
> >
> >
> >
> > I have both Apache and Tomcat running on the same RHEL. I have
> successfully
> > configured Apache to use OpenSSL TLSv1.2, but I cannot get Tomcat to use
> > TLSv1.2. Tomcat for some reason
> >
> > will only use TLV 1.0, and that is no good. No matter what parameter I
> set
> > in the server.xml sslProtocol directive it won’t change. Seems like it’s
> > getting that directive somewhere else but I can't locate.
> >
> >
> >
> > <Connector
> >
> >          port="8443"
> >
> >          scheme="https"
> >
> >          secure="true"
> >
> >          protocol="org.apache.coyote.http11.Http11AprProtocol"
> >
> >          SSLEnabled="true"
> >
> >
> SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
> >
> >
> > SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
> >
> >
> > SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
> >
> >          SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
> >
> >          SSLHonorCipherOrder="true"
> >
> >          maxThreads="150"
> >
> >          clientAuth="false"
> >
> >          sslProtocol="-all +TLSv1.2"
> >
> >                                             />
> >
> >
> >
> > OpenSSL 1.0.2d
> >
> > Tomcat 7.0.39 (I know it’s old, but it's what I have to work with at this
> > time)
> >
> >
> > Thank you for any insight.
> >
> > -John
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Re: Tomcat won't use TLSv1.2

Posted by "info@flyingfischer.ch" <in...@flyingfischer.ch>.
Am 06.03.20 um 15:41 schrieb Christopher Schultz:
> Markus,
>
> On 3/5/20 13:44, info@flyingfischer.ch wrote:
> > Try SSLProtocol="TLSv1.2" (mind the case) instead of
> > sslProtocol="-all +TLSv1.2".
>
> This is correct when using either OpenSSL or JSSE. "sslProtocol" will
> only work for JSSE configuration, and basically only allows a single
> value: "TLS".
>
> It's better to use <SSLHostConfig> where it's always just "protocols".
>
> > Had this issue too. The connector parameters for SSL are a huge
> > mess and have been changed constantly.
>
> Really? Can you give an example? Other than the change from
> <Connector> to <SSLHostConfig>, everything has been pretty stable for
> ... decades.
>
> -chris
>
Well, yes. If I remember correctly this was:

    <Connector port="443" URIEncoding="UTF-8"
               server="Apache"
               protocol="org.apache.coyote.http11.Http11AprProtocol"
               maxThreads="200"
               scheme="https"
               secure="true"
               SSLEnabled="true"
               keystoreFile="/path/to/keystore.jks"
               keyAlias="aliasName"
               keystorePass="*****"
               clientAuth="false"
               sslProtocol="TLSv1.2, TLSv1.3" >
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol"
            overheadDataThreshold="0" />
    </Connector>

Server is also built with TC native. Always using latest stable version
of TC 8.5. OpenJDK 64-Bit Server VM Zulu13.29+9-CA (build 13.0.2+6-MTS,
mixed mode, sharing).

Chrome could not cope with HTTP2 with this configuration. So I switched
back to HTTP1.1

    <Connector port="443" URIEncoding="UTF-8"
               server="Apache"
               protocol="HTTP/1.1"
               maxThreads="200"
               scheme="https"
               secure="true"
               SSLEnabled="true"
               keystoreFile="/path/to/keystore.jks"
               keyAlias="aliasName"
               keystorePass="*****"
               clientAuth="false"
               SSLProtocol="TLSv1.2+TLSv1.3" >
    </Connector>

TLSv1.2 only started to work after correcting sslProtocol to SSLProtocol.

Best
Markus



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat won't use TLSv1.2

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Markus,

On 3/5/20 13:44, info@flyingfischer.ch wrote:
> Try SSLProtocol="TLSv1.2" (mind the case) instead of
> sslProtocol="-all +TLSv1.2".

This is correct when using either OpenSSL or JSSE. "sslProtocol" will
only work for JSSE configuration, and basically only allows a single
value: "TLS".

It's better to use <SSLHostConfig> where it's always just "protocols".

> Had this issue too. The connector parameters for SSL are a huge
> mess and have been changed constantly.

Really? Can you give an example? Other than the change from
<Connector> to <SSLHostConfig>, everything has been pretty stable for
... decades.

- -chris

> Am 05.03.20 um 19:30 schrieb rugman66 .:
>> Hello,
>>
>>
>>
>> I have both Apache and Tomcat running on the same RHEL. I have
>> successfully configured Apache to use OpenSSL TLSv1.2, but I
>> cannot get Tomcat to use TLSv1.2. Tomcat for some reason
>>
>> will only use TLV 1.0, and that is no good. No matter what
>> parameter I set in the server.xml sslProtocol directive it won’t
>> change. Seems like it’s getting that directive somewhere else but
>> I can't locate.
>>
>>
>>
>> <Connector
>>
>> port="8443"
>>
>> scheme="https"
>>
>> secure="true"
>>
>> protocol="org.apache.coyote.http11.Http11AprProtocol"
>>
>> SSLEnabled="true"
>>
>> SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
>>
>>
>>
>>
SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
>>
>>
>> SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
>>
>>
>>
SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
>>
>> SSLHonorCipherOrder="true"
>>
>> maxThreads="150"
>>
>> clientAuth="false"
>>
>> sslProtocol="-all +TLSv1.2"
>>
>> />
>>
>>
>>
>> OpenSSL 1.0.2d
>>
>> Tomcat 7.0.39 (I know it’s old, but it's what I have to work with
>> at this time)
>>
>>
>> Thank you for any insight.
>>
>> -John
>>
>
>
> ---------------------------------------------------------------------
>
>
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=/cZ+
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat won't use TLSv1.2

Posted by "info@flyingfischer.ch" <in...@flyingfischer.ch>.
Try SSLProtocol="TLSv1.2" (mind the case) instead of sslProtocol="-all
+TLSv1.2".

Had this issue too. The connector parameters for SSL are a huge mess and
have been changed constantly.

Best
Markus

Am 05.03.20 um 19:30 schrieb rugman66 .:
> Hello,
>
>
>
> I have both Apache and Tomcat running on the same RHEL. I have successfully
> configured Apache to use OpenSSL TLSv1.2, but I cannot get Tomcat to use
> TLSv1.2. Tomcat for some reason
>
> will only use TLV 1.0, and that is no good. No matter what parameter I set
> in the server.xml sslProtocol directive it won’t change. Seems like it’s
> getting that directive somewhere else but I can't locate.
>
>
>
> <Connector
>
>          port="8443"
>
>          scheme="https"
>
>          secure="true"
>
>          protocol="org.apache.coyote.http11.Http11AprProtocol"
>
>          SSLEnabled="true"
>
>          SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
>
>
> SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
>
>
> SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
>
>          SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
>
>          SSLHonorCipherOrder="true"
>
>          maxThreads="150"
>
>          clientAuth="false"
>
>          sslProtocol="-all +TLSv1.2"
>
>                                             />
>
>
>
> OpenSSL 1.0.2d
>
> Tomcat 7.0.39 (I know it’s old, but it's what I have to work with at this
> time)
>
>
> Thank you for any insight.
>
> -John
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat won't use TLSv1.2

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

John,

On 3/5/20 13:30, rugman66 . wrote:
> I have both Apache and Tomcat running on the same RHEL. I have
> successfully configured Apache to use OpenSSL TLSv1.2, but I cannot
> get Tomcat to use TLSv1.2. Tomcat for some reason
>
> will only use TLV 1.0, and that is no good. No matter what
> parameter I set in the server.xml sslProtocol directive it won’t
> change. Seems like it’s getting that directive somewhere else but I
> can't locate.
>
>
>
> <Connector
>
> port="8443"
>
> scheme="https"
>
> secure="true"
>
> protocol="org.apache.coyote.http11.Http11AprProtocol"
>
> SSLEnabled="true"
>
> SSLCertificateFile="/auto/englearn-web/ssl_certificate/server.cer"
>
>
> SSLCertificateChainFile="/auto/englearn-web/ssl_certificate/chain.cer"
>
>
>
> SSLCertificateKeyFile="/auto/englearn-web/ssl_certificate/server.key"
>
>  SSLCipherSuite="RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW"
>
> SSLHonorCipherOrder="true"
>
> maxThreads="150"
>
> clientAuth="false"
>
> sslProtocol="-all +TLSv1.2"

For Tomcat 7, use:

sslProtocol="TLS"
sslEnabledProtocols="TLSv1.2"

For JSSE (if you are using NIO, which you are NOT, but might want to
consider) and, for OpenSSL:

SSLProtocol="TLSv1.2"

Case matters, here.

Note that your version of Java must support TLSv1.2 in order for this
to work. What version of Java are you running?

> OpenSSL 1.0.2d
>
> Tomcat 7.0.39 (I know it’s old, but it's what I have to work with
> at this time)

Are you able to upgrade to a later Tomcat 7.0.x? There are lots of
things fixed between 7.0.39 and 7.0.100.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=9UNH
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org