title: How can I disable TLSv1.0 with spring boot and embedded tomcat?
body: <p>I want to de-activate TLSv1.0 with spring boot(release 1.3.3), but it doesn't work if application.yml as below:</p>
  
  <p><code>ssl:
      protocol: TLSv1.2
      key-store: /E:/key/server.jks
      key-store-password: serverpkcs12</code></p>
  
  <p>I still can access web page if only choose "USE TLS 1.0" in IE.
  <a href="http://i.stack.imgur.com/EdvyK.png" rel="noreferrer">See this pic--not work.</a></p>
  
  <p>However, if doesn't use embedded tomcat, and add these arguments for Connector located in server.xml, it works fine for me--web page blocked by IE. <a href="http://i.stack.imgur.com/UJXel.png" rel="noreferrer">See this pic--worked for me</a></p>
  
  <p><code>sslProtocols="TLSv1.2" sslEnabledProtocols="TLSv1.2"</code></p>
  
  <p>And I also tried some VM arguments, for exmaple <strong>-Dhttps.protocols="TLSv1.2"</strong>, all of them are useless.</p>
  
  <p>So What can I do for this?</p>