aboutsummaryrefslogtreecommitdiffstats
path: root/sonar-application
diff options
context:
space:
mode:
authorSimon Brandhof <simon.brandhof@sonarsource.com>2015-02-01 20:03:19 +0100
committerSimon Brandhof <simon.brandhof@sonarsource.com>2015-02-02 21:47:45 +0100
commitdc222394a1426870395cfb5fede758a5f64e4116 (patch)
treec967b15dcf73dedb792847a04efbf0c71257a746 /sonar-application
parentb50745d4f87179c3b77f383efbe3e5b934915c1a (diff)
downloadsonarqube-dc222394a1426870395cfb5fede758a5f64e4116.tar.gz
sonarqube-dc222394a1426870395cfb5fede758a5f64e4116.zip
SONAR-6139 Upgrade Tomcat from 7.0.54 to 8.0.18
SONAR-6141 apply Mozilla recommandations for default ciphers (Intermediate Compatibility)
Diffstat (limited to 'sonar-application')
-rw-r--r--sonar-application/src/main/assembly/conf/sonar.properties5
1 files changed, 3 insertions, 2 deletions
diff --git a/sonar-application/src/main/assembly/conf/sonar.properties b/sonar-application/src/main/assembly/conf/sonar.properties
index 84feed3c14e..abc68188936 100644
--- a/sonar-application/src/main/assembly/conf/sonar.properties
+++ b/sonar-application/src/main/assembly/conf/sonar.properties
@@ -156,10 +156,11 @@
# HTTPS - comma separated list of encryption ciphers to support for HTTPS connections.
# If specified, only the ciphers that are listed and supported by the SSL implementation will be used.
-# By default, the default ciphers for the JVM will be used. Note that this usually means that the weak
-# export grade ciphers will be included in the list of available ciphers.
# The ciphers are specified using the JSSE cipher naming convention (see
# https://www.openssl.org/docs/apps/ciphers.html)
+# By default, the Mozilla recommendations are followed (Intermediate Compatibility). See
+# https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
+#
# Example: sonar.web.https.ciphers=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
#sonar.web.https.ciphers=