Hello,

I see few problems in this field in JMeter.

1) Cipher Suite is configurable through 2 properties:
Documented one called "https.cipherSuites" in HttpSSLProtocolSocketFactory
Undocumented one called "https.socket.ciphers" in
LazyLayeredConnectionSocketFactory

For HC4, the latter is the used one
For Java, the first one is used


I suggest we switch in LazyLayeredConnectionSocketFactory
https.socket.ciphers to https.cipherSuites as the latter is documented

2) It seems it's not possible to control cipher suites and protocols in
HTTP(S) Test Script Recorder, we only allow setting SSLContext algo but
neither SSLSocket protocols nor cipherSuites.

I suggest we set both using the values of properties in Proxy#startSSL:

   - https.cipherSuites
   - https.socket.protocols


Are you ok with my analysis and proposals ?
Thanks
-- 
Cordialement
Philippe M.
Ubik-Ingenierie

Reply via email to