java - getSupportedCipherSuites vs getDefaultCipherSuites Apache CXF -
this question people know working of apache cxf jax rs. when cxf creates httpsurlconnection puts wrapper around default sslsocketfactory called sslsocketfactorywrapper, has parameter called ciphers.
this parameter initialized calling getsupportedciphersuites() of sslcontextimpl.
but when default implementation of java creates sslsocket, initializes ciphers calling getdefaultciphersuites() returns smaller list of ciphers.
getsupportedciphersuites() returns list of ciphers enabled + enabled.
looks program failing because cxf calls getsupportedciphersuites rather getdefaultciphersuites. body know why case? there way override behavior. know setting ciphersuitefilter can use reduce number of ciphers not easy use in environment.
thanks
you can use default sslsocketfactory instead via:
tlsclientparameters.isusehttpsurlconnectiondefaultsslsocketfactory()
(see here: http://cxf.apache.org/docs/tls-configuration.html#tlsconfiguration-clienttlsparameters)
i don't know why program fail because wider range of cipher suites installed opposed default...
colm.
Comments
Post a Comment