Alex Rudyy created QPID-7113:
--------------------------------

             Summary: [Java Broker] Add ability to use Broker side cipher suite 
ordering during TLS negotiation
                 Key: QPID-7113
                 URL: https://issues.apache.org/jira/browse/QPID-7113
             Project: Qpid
          Issue Type: Improvement
          Components: Java Broker
            Reporter: Alex Rudyy


During TLS handshaking, the client requests to negotiate a cipher suite from a 
list of cryptographic options that it supports, starting with its first 
preference. Then, the server selects a single cipher suite from the list of 
cipher suites requested by the client. Normally, the selection honors the 
client's preference. 

Broker should be able to select cipher suites based on its own preference 
rather than the client's preference in order to mitigate the risks of using 
weak cipher suites.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to