[MTOMCAT-309] Allow specifying sslProtocols via pom configuration

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.2
• Component/s: tomcat7
• Labels: easyfix
• Flags: Important
• Assignee: Olivier Lamy
• Reporter: Cory Lum
• Created: 15/Feb/17 18:57
• Updated: 15/Feb/17 19:08

Description

There is currently no way to specify the sslProtocol. The only workaround is to use a custom server.xml.

The httpsConnector is hardcoded to use TLS.
httpsConnector.setProperty( "sslProtocol", "TLS" );

Due to security reasons, this version is insufficient for many modern browser (chrome and firefox) without having to manually compromise the browser's security settings which expects communication via TLSv1.2