diff options
author | Simon Brandhof <simon.brandhof@sonarsource.com> | 2015-02-01 20:03:19 +0100 |
---|---|---|
committer | Simon Brandhof <simon.brandhof@sonarsource.com> | 2015-02-02 21:47:45 +0100 |
commit | dc222394a1426870395cfb5fede758a5f64e4116 (patch) | |
tree | c967b15dcf73dedb792847a04efbf0c71257a746 /sonar-application | |
parent | b50745d4f87179c3b77f383efbe3e5b934915c1a (diff) | |
download | sonarqube-dc222394a1426870395cfb5fede758a5f64e4116.tar.gz sonarqube-dc222394a1426870395cfb5fede758a5f64e4116.zip |
SONAR-6139 Upgrade Tomcat from 7.0.54 to 8.0.18
SONAR-6141 apply Mozilla recommandations for default ciphers (Intermediate Compatibility)
Diffstat (limited to 'sonar-application')
-rw-r--r-- | sonar-application/src/main/assembly/conf/sonar.properties | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/sonar-application/src/main/assembly/conf/sonar.properties b/sonar-application/src/main/assembly/conf/sonar.properties index 84feed3c14e..abc68188936 100644 --- a/sonar-application/src/main/assembly/conf/sonar.properties +++ b/sonar-application/src/main/assembly/conf/sonar.properties @@ -156,10 +156,11 @@ # HTTPS - comma separated list of encryption ciphers to support for HTTPS connections. # If specified, only the ciphers that are listed and supported by the SSL implementation will be used. -# By default, the default ciphers for the JVM will be used. Note that this usually means that the weak -# export grade ciphers will be included in the list of available ciphers. # The ciphers are specified using the JSSE cipher naming convention (see # https://www.openssl.org/docs/apps/ciphers.html) +# By default, the Mozilla recommendations are followed (Intermediate Compatibility). See +# https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29 +# # Example: sonar.web.https.ciphers=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 #sonar.web.https.ciphers= |