Christopher Schultz wrote:
> Mark,
> 
> On 10/23/2009 7:53 AM, Mark Thomas wrote:
>> http://java.sun.com/javase/6/docs/
>> "Security" leads to
>> http://java.sun.com/javase/6/docs/technotes/guides/security/index.html
>> "Standard Algorithm Names" leads to
>> http://java.sun.com/javase/6/docs/technotes/guides/security/StandardNames.html
>> and finally "Additional JSSE Standard Names" leads to
>> http://java.sun.com/javase/6/docs/technotes/guides/security/StandardNames.html#jssenames#
> 
> These just seem to list the names of algorithms. If a cipher is
> available does that mean it's enabled? That sounds like a pretty stupid
> question, but here:

The original question was which ciphers are supported - not which ones
are enabled by default.

>> You could also have just searched the archives for the users list.
>> Searching for "default ciphers" would have found this:
>> http://tomcat.markmail.org/search/default+ciphers+list:org%2Eapache%2Etomcat%2Eusers
> 
>> Ignoring your thread, the answer you want is the first one in the list.
> 
> ...you said this:

<snip/>

> It's clear to me that the list of available ciphers is different than
> the list of enabled ciphers.

Correct.

> Is there a way to get this list programmatically? I have a small Java
> program that dumps everything about a Provider (see below for the code),
> but it doesn't dump the ciphers in the format you have shown above (and
> doesn't indicate which items are enabled by default).

Take a look at javax.net.ssl.SSLServerSocketFactory and how it is used
in org.apache.tomcat.util.net.jsse.JSSESocketFactory

Mark




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to