Disabling Weak Ciphers for Tomcat 5.5.27?

See attribute ciphers

in HTTP connector definition: http://tomcat.apache.org/tomcat-5.5-doc/config/http.html

Alternatively, if you are using APR, see the directive SSLCipherSuite

as described in the SSL connector configuration as described here: http://tomcat.apache.org/tomcat-5.5-doc/apr.html .

Note that the OpenSSL ciphersuite names are not exactly the same as the jsse ciphersuite names. Java ciphers are documented at: http://java.sun.com/j2se/1.4.2/docs/guide/security/jsse/JSSERefGuide.html#SunJSSE . For APR, the command openssl ciphers

will provide you with a list of all available OpenSSL ciphers on your system.