Restrict ciphers in embedded Tomcat

Question

How can I programmatically restrict the available ciphers in embedded Tomcat?

In other words what is the programmatic equivalent of

<connector ciphers="...">

What does your driver code look like already? Are you manually configuring a `Connector`? — Christopher Schultz, May 21 '15 at 17:15

score 0 · Answer 1 · answered May 24 '15 at 15:26

It looks like that's a setting that doesn't have a direct Connector.set*Foo* method. Try this:

Connector conn = ...;
conn.setProperty("Ciphers", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, ...");

If you are using Tomcat 8, you can also use OpenSSL syntax, even when using a JSSE-based connector. See the "Ciphers" section of http://tomcat.apache.org/tomcat-8.0-doc/config/http.html for more information.

1 Answers1