Hi Chris, We ran into similar issues when upgrading to latest JDK 8 (and 11). We found that the fix was to add the sun.security.ec.SunEC as a security provider in java.security like so:
security.provider.9=sun.security.ec.SunEC After adding this we were able to continue using our current certificates and communicate with services using the updated ciphers. Depending on the version / flavor of JDK you're using you may also need to apply the unlimited strength JCE policy patch found here: https://www.oracle.com/java/technologies/javase-jce8-downloads.html Steve