java - getSupportedCipherSuites vs getDefaultCipherSuites Apache CXF -


this question people know working of apache cxf jax rs. when cxf creates httpsurlconnection puts wrapper around default sslsocketfactory called sslsocketfactorywrapper, has parameter called ciphers.

this parameter initialized calling getsupportedciphersuites() of sslcontextimpl.

but when default implementation of java creates sslsocket, initializes ciphers calling getdefaultciphersuites() returns smaller list of ciphers.

getsupportedciphersuites() returns list of ciphers enabled + enabled.

looks program failing because cxf calls getsupportedciphersuites rather getdefaultciphersuites. body know why case? there way override behavior. know setting ciphersuitefilter can use reduce number of ciphers not easy use in environment.

thanks

you can use default sslsocketfactory instead via:

tlsclientparameters.isusehttpsurlconnectiondefaultsslsocketfactory()

(see here: http://cxf.apache.org/docs/tls-configuration.html#tlsconfiguration-clienttlsparameters)

i don't know why program fail because wider range of cipher suites installed opposed default...

colm.


Comments

Popular posts from this blog

c++ - Difference between pre and post decrement in recursive function argument -

php - Nothing but 'run(); ' when browsing to my local project, how do I fix this? -

php - How can I echo out this array? -