You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Apache Wiki <wi...@apache.org> on 2018/04/30 15:06:15 UTC
[Tomcat Wiki] Update of "Security/Ciphers" by markt
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification.
The "Security/Ciphers" page has been changed by markt:
https://wiki.apache.org/tomcat/Security/Ciphers?action=diff&rev1=19&rev2=20
Comment:
Remove references to Java 5 and Tomcat 6
== BIO/NIO/NIO2 with JSSE Results (Default) ==
- || || Java 5 || Java 6 || Java 7 || Java 8 ||
+ || || Java 6 || Java 7 || Java 8 ||
- || Tomcat 6 || C || C || A || A ||
- || Tomcat 7 || N/A || C || A || A ||
+ || Tomcat 7 || C || A || A ||
- || Tomcat 8 || N/A || N/A || A || A ||
+ || Tomcat 8 || N/A || A || A ||
- || Tomcat 8.5 || N/A || N/A || A || A ||
+ || Tomcat 8.5 || N/A || A || A ||
- || Tomcat 9 || N/A || N/A || N/A || A ||
+ || Tomcat 9 || N/A || N/A || A ||
Note: These results were obtained using the JCE Unlimited Strength Jurisdiction Policy Files
- Note: The Java 5 and 6 results are capped at C because neither Java 5 nor 6 support TLS 1.1 or 1.2.
+ Note: The 6 results are capped at C because Java 6 does not support TLS 1.1 or 1.2.
The equivalent OpenSSL cipher configurations used to obtain the above results are:
- || Java 5 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!DHE ||
|| Java 6 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!DHE ||
|| Java 7 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA:!DHE ||
|| Java 8 || HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA ||
- Note: kRSA ciphers are not excluded in Java 6 and earlier since they are likely to be the only ones left
+ Note: kRSA ciphers are not excluded in Java 6 since they are likely to be the only ones left
Note: In Java 7 and earlier DHE ciphers use insecure DH keys with no means to configure longer keys which is why DHE ciphers are excluded in those Java versions.
== NIO/NIO2 with JSSE+OpenSSL Results (Default) ==
- || || Java 5 || Java 6 || Java 7 || Java 8 ||
+ || || Java 6 || Java 7 || Java 8 ||
- || Tomcat 8.5 || N/A || N/A || A || A ||
+ || Tomcat 8.5 || N/A || A || A ||
- || Tomcat 9 || N/A || N/A || N/A || A ||
+ || Tomcat 9 || N/A || N/A || A ||
The OpenSSL cipher configuration used was '''HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA'''. Up-to-date selection of secure cipher suites in OpenSSL format is available at [[https://wiki.mozilla.org/Security/Server_Side_TLS|Mozilla wiki]].
@@ -40, +38 @@
== APR with OpenSSL Results (Default) ==
- || || Java 5 || Java 6 || Java 7 || Java 8 ||
+ || || Java 6 || Java 7 || Java 8 ||
- || Tomcat 6 || A || A || A || A ||
- || Tomcat 7 || N/A || A || A || A ||
+ || Tomcat 7 || A || A || A ||
- || Tomcat 8 || N/A || N/A || A || A ||
+ || Tomcat 8 || N/A || A || A ||
- || Tomcat 8.5 || N/A || N/A || A || A ||
+ || Tomcat 8.5 || N/A || A || A ||
- || Tomcat 9 || N/A || N/A || N/A || A ||
+ || Tomcat 9 || N/A || N/A || A ||
The OpenSSL cipher configuration used was '''HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA'''. Up-to-date selection of secure cipher suites in OpenSSL format is available at [[https://wiki.mozilla.org/Security/Server_Side_TLS|Mozilla wiki]].
== Environment ==
The results above were generated with:
- * Java 5, 64-bit, update 22
* Java 6, 64-bit, update 45
* Java 7, 64-bit, update 80
* Java 8, 64-bit, update 77
- * Apache Tomcat 6.0.46-dev, r1737284.
* Apache Tomcat 7.0.69-dev, r1737253.
* Apache Tomcat 8.0.34-dev, r1737224.
* Apache Tomcat 8.5.1-dev, r1737241.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org