Page History

...

</Connector>

Enable TLS on port 8443

    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true">

        <SSLHostConfig     <SSLHostConfig protocols="TLSv1.2" truststoreFile="conf/cacerts.jks">

                    <Certificate certificateKeystoreFile="conf/clientcert.jks"

                         certificateKeystorePassword                     certificateKeystorePassword="changeit"

                         type                     type="RSA" />

            </SSLHostConfig>

    </Connector>

Note: Set protocols="TLSv1.2" to disable TLSv1.3 since the TCK requires post-handshake authentication and the Java 11 client does not support that.

tomcat-users.xml

Make the following changes:

...

A default 10.0.x build (as of 2020-06-1819) with the above configuration and the TCK built from source (as of 2020-06-1819) triggers 23 21 test failures

1 Expected failures

...

• PR 338
  • Incorrect major version (1 failure),
  • Using LF rather an CRLF (15 failures)
  • Strange /j_security_check test (2 failures)Error page attributes assumed to be unset when spec requires them to be set (3 failures)
  • Missing annotation marker in Java 8 signature tests (1 failure)
  • Re-do Java 11 signature test based on Java 8
  • Fix regression in error page tests (1 failure)
  • Java 11 issues with HTTP/2 client