RFR : 8162362: Introduce system property to control enabled ciphersuites

Seán Coffey sean.coffey at oracle.com
Sun Aug 21 12:59:50 UTC 2016


I'd like to backport this to jdk8u-dev. The new 
jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system 
properties will allows users to control what ciphersuites are enabled on 
SSL Sockets/Engines. One extra edit for jdk8u in 
SSLEngineImpl/SSLSocketImpl where ciphersuites was not configured if 
setUseClientMode was called during connectionState of cs_START. JDK 9 
introduced these changes when DTLS was being introduced.

https://bugs.openjdk.java.net/browse/JDK-8162362
http://cr.openjdk.java.net/~coffeys/webrev.8162362.8u-dev/webrev/

-- 
Regards,
Sean.




More information about the security-dev mailing list