after upgrading to 25.1 from RU2 the server.xml changed.
In 25.1 the cipher= section has been removed.
<SSLHostConfig certificateVerification="none" revocationEnabled="false" sslProtocol="TLS" truststoreFile="${catalina.b
ase}/conf/truststore.jks" truststorePassword="protect">
<Certificate certificateKeystoreFile="${catalina.base}/conf/.keystore" certificateKeystorePassword="XXXXXXXXXX"/>
</SSLHostConfig>
16.0.2 default:
<SSLHostConfig certificateVerification="none" ciphers="TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" protocols="TLSv1.2" revocationEnabled="false" sslProtocol="TLS" truststoreFile="${catalina.base}/conf/truststore.jks" truststorePassword="protect">
<Certificate certificateKeystoreFile="${catalina.base}/conf/.keystore" certificateKeystorePassword="XXXXXXXXX"/>
</SSLHostConfig>
In 25.1 the protocol used is TLS 1.3 and the cipher suites are limited to what is available in TLS 1.3