janbrasna / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
3 stars 0 forks source link

Fix Tomcat TLSv1.3 when TLSv1.2 ciphers configured #26

Closed janbrasna closed 1 month ago

janbrasna commented 10 months ago

OpenSSL vs JSSE issue? https://stackoverflow.com/a/68818408

(no implementation set for Connector, APR due to OpenSSL naming implied? JSSE will accept that instead of IANA thou — so APR won't configure TLSv1.3 at all and apply defaults, while JSSE will adhere to the cipher list for all protocols, needing the TLSv1.3 defaults explicitly enumerated in the allowed ciphers?)

TODO: mention APR vs. JSSE implementation differences somehow?

OQ: hardcoded delimiter… if tls13 ➡️ ciperSuites won't be empty, no addtl test for trailing ":" needed?

netlify[bot] commented 10 months ago

Deploy Preview for mozsslconf-dev ready!

Name Link
Latest commit 473670d7a30f0eef9300abc9729006f3507bb048
Latest deploy log https://app.netlify.com/sites/mozsslconf-dev/deploys/670a9a4b46876a00082557bc
Deploy Preview https://deploy-preview-26--mozsslconf-dev.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

Lighthouse
1 paths audited
Performance: 76
Accessibility: 87
Best Practices: 100
SEO: 84
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify site configuration.