Details
Description
This follow this discussion http://markmail.org/message/xfhgamlm73dye662
Summary: Tomcat provides a default ciphers definition better to use it and let Tomcat handles that for us, we know Tomcat security is strong.
This is not a bug, but as security could evolve in futur better to backport in supported branches