spring-boot

Spring Boot

Andy Wilkinson d40ec740f5 Upgrade to Tomcat 10.1.52 Tomcat 9.0.115, 10.1.52, and 11.0.18 include a breaking change [1] to how ciphers are configured when using HTTPS. Previously, a single setting was used but this has now been split in two; the existing ciphers setting for TLSv1.2 ciphers and a new ciperSuites setting for TLSv1.3. As part of this split, the behavior of the ciphers setting has been changed such that any TLSv1.3 ciphers are ignored and a warning is logged. This change in Tomcat is problematic without also making some changes in Boot. If we had done nothing, a user that had configured only TLSv1.3 cipers would have them all ignored, leaving their SSL connection unexpectedly using all of the default ciphers which may be less secure. This commit adapts to the breaking change in Tomcat by taking the user's list of ciphers and splitting into into TLSv1.2 and TLSv1.3 ciphers before passing them into Tomcat's two settings (ciphers and cipherSuites respectively). This is done defensively for backwards compatibility. If the methods to identify and configure the TLSv1.3 ciphers are not present, we assume that we're running with an earlier version of Tomcat and fall back to passing them all into the ciphers setting as we did previously. Closes gh-49084 [1] `9abf6bddb2`		1 month ago
..
spring-boot	Upgrade to Tomcat 10.1.52	1 month ago
spring-boot-actuator	Polish lambda expression and method reference	2 months ago
spring-boot-actuator-autoconfigure	Simplify PropertiesMeterFilter	2 months ago
spring-boot-autoconfigure	Remove duplicate metadata and add check to prevent future duplicates	1 month ago
spring-boot-dependencies	Upgrade to MySQL 9.6.0	1 month ago
spring-boot-devtools	Merge branch '3.4.x' into 3.5.x	4 months ago
spring-boot-docker-compose	Add checkstyle rule for AssertJ Assertions import	2 months ago
spring-boot-docs	Polish "Document naming convention for custom test-scoped starters"	2 months ago
spring-boot-parent	Label dependency upgrade issues as team-only	2 months ago
spring-boot-starters	fixup! Upgrade to Pulsar 4.0.6	7 months ago
spring-boot-test	Fix non-existent assertion in Javadoc example of getFailure()	2 months ago
spring-boot-test-autoconfigure	Adapt to breaking change in Spring Data Neo4j	2 months ago
spring-boot-testcontainers	Merge branch '3.4.x' into 3.5.x	4 months ago
spring-boot-tools	Polish 'Fix whitespace handling in multi-line javadoc'	1 month ago