Hi Xuelei,
We should provide more information about which ciphersuites were
actually considered for a handshake and why they were ultimately
chosen/not chosen, but for now we have been requested to add a debug
message to indicate whether or not the selected ciphersuite was legacy.
Examples:
% java -Djavax.net.debug=all MyClass // or % java -Djavax.net.debug=ssl
MyClass
...deleted...
Standard ciphersuite chosen: TLS_RSA_WITH_AES_128_CBC_SHA
...deleted...
or
...deleted...
Legacy ciphersuite chosen: SSL_RSA_WITH_RC4_128_SHA
...deleted...
The proposed simple change is:
https://bugs.openjdk.java.net/browse/JDK-8167459
http://cr.openjdk.java.net/~wetmore/8167459/webrev.00/
Thanks,
Brad