Project

General

Profile

« Previous | Next » 

Revision 4a4b0ab9

Added by Eric Helms over 9 years ago

Fixes #8173: Disable SSLv3 in tomcat

View differences:

templates/tomcat/server.xml.erb
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="want" SSLProtocol="TLS"
clientAuth="want"
sslProtocols="TLSv1.2,TLSv1.1,TLSv1"
keystoreFile="conf/keystore"
truststoreFile="conf/keystore"
keystorePass="<%= scope.lookupvar("candlepin::keystore_password") %>"

Also available in: Unified diff