Can a Spring MVC Application Alter SSL?
<p>I'm disabling SSLv3 on some updated tomcat instances and all is well. <code>openssl</code> verifies SSLv3 is disabled... until I deploy the WAR file.</p>

<p>As soon as the WAR file is deployed and started, the tomcat instance begins answering Openssl with SSLv3 handshakes!</p>

<p>Undeploy and restart tomcat and it's back to having SSLv3 disabled.</p>

<p>What would be causing this issue? There is no embedded tomcat since it is not a Spring Boot application. <code>mvn dependency:list</code> also confirms no tomcat library.</p>

<p><strong>UPDATE</strong></p>

<p>Some of the ciphers I'm using in the server.xml are not available. I've added strong JCE jars which did make a few of the unavailable available.</p>

<p>Also, the web application does use 2 modules that implement 2 versions of BouncyCastle libs.</p>