Christopher Schultz wrote: > Mark, > > On 10/23/2009 7:53 AM, Mark Thomas wrote: >> http://java.sun.com/javase/6/docs/ >> "Security" leads to >> http://java.sun.com/javase/6/docs/technotes/guides/security/index.html >> "Standard Algorithm Names" leads to >> http://java.sun.com/javase/6/docs/technotes/guides/security/StandardNames.html >> and finally "Additional JSSE Standard Names" leads to >> http://java.sun.com/javase/6/docs/technotes/guides/security/StandardNames.html#jssenames# > > These just seem to list the names of algorithms. If a cipher is > available does that mean it's enabled? That sounds like a pretty stupid > question, but here:
The original question was which ciphers are supported - not which ones are enabled by default. >> You could also have just searched the archives for the users list. >> Searching for "default ciphers" would have found this: >> http://tomcat.markmail.org/search/default+ciphers+list:org%2Eapache%2Etomcat%2Eusers > >> Ignoring your thread, the answer you want is the first one in the list. > > ...you said this: <snip/> > It's clear to me that the list of available ciphers is different than > the list of enabled ciphers. Correct. > Is there a way to get this list programmatically? I have a small Java > program that dumps everything about a Provider (see below for the code), > but it doesn't dump the ciphers in the format you have shown above (and > doesn't indicate which items are enabled by default). Take a look at javax.net.ssl.SSLServerSocketFactory and how it is used in org.apache.tomcat.util.net.jsse.JSSESocketFactory Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org