[Bug 921411] New: Java:packages/libtcnative-1-0: Bug
http://bugzilla.opensuse.org/show_bug.cgi?id=921411 Bug ID: 921411 Summary: Java:packages/libtcnative-1-0: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: bmaryniuk@suse.com Reporter: juergenhuber@web.de QA Contact: opensuse-communityscreening@forge.provo.novell.com CC: tchvatal@suse.com Found By: --- Blocker: --- 1. Switched to Version 1.1.32 from OBS 2. Enabled Option SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" to Working connector 3. Error Log shows: Caused by: java.lang.Exception: An invalid value [TLSv1+TLSv1.1+TLSv1.2] was provided for the SSLProtocol attribute at org.apache.tomcat.util.net.AprEndpoint.bind(AprEndpoint.java:490) at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:646) at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:434) at org.apache.catalina.connector.Connector.initInternal(Connector.java:978) ... 13 more 4. Connector doesn't come up -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=921411 --- Comment #1 from Tomáš Chvátal <tchvatal@suse.com> --- What version of openSUSE do you use? What version of tomcat are you using there? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=921411 --- Comment #2 from Jürgen Huber <juergenhuber@web.de> --- - openSUSE 13.1, 64 Bit - tomcat, tomcat-el-2_2-api, tomcat-jsp-2_2-api, tomcat-lib and tomcat-servlet-3_0-api: Version 7.0.55.74.51 (even from OBS) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=921411 --- Comment #3 from Bo Maryniuk <bmaryniuk@suse.com> --- The APR supports only SSLv2, SSLv3 and TLSv1.0. The default value is set to SSLv3+TLSv1. The protocol SSLv2 is unsafe. See more: http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support_-_APR/N... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=921411 --- Comment #4 from Jürgen Huber <juergenhuber@web.de> --- Hm. I'm not sure: I think since APR-Version 1.1.32 it should be possible to do a combination of TLSv1+TLSv1.1+TLSv1.2. It is recommended here http://wiki.apache.org/tomcat/Security/POODLE (see Section "APR-based connector (Apr)") and here http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html (see Section "Edit the Tomcat Configuration File" -> <Connector> Example #2: APR based Connectors) -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com