I'd like to backport this to jdk8u-dev. The new jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system properties will allows users to control what ciphersuites are enabled on SSL Sockets/Engines. One extra edit for jdk8u in SSLEngineImpl/SSLSocketImpl where ciphersuites was not configured if setUseClientMode was called during connectionState of cs_START. JDK 9 introduced these changes when DTLS was being introduced.

https://bugs.openjdk.java.net/browse/JDK-8162362
http://cr.openjdk.java.net/~coffeys/webrev.8162362.8u-dev/webrev/

--
Regards,
Sean.

Reply via email to