Use the following in your conf/server.xml, <Connector> configuration<br />sslProtocol="TLS"<br />ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA"<br />sslEnabledProtocols="TLSv1+TLSv1.1+TLSv1.2"<br />