Re: Question about JSSE on Midrange boxes

[Charles Wilt <charles.wilt@xxxxxxxxx>]

What do you mean, where JSSE "gets its ciphers"?

They are built into the jdk.

You can override what's enabled here:

/QOpenSys/QIBM/ProdData/JavaVM/jdkXX/jre/lib/security/java.security

Where jdkXX is the version you're using...

Charles

On Mon, Oct 16, 2017 at 12:45 PM, James H. H. Lampert <
jamesl@xxxxxxxxxxxxxxxxx> wrote:

> Does anybody here know where JSSE on Midrange boxes gets its ciphers?
>
> I have reason to believe that a Tomcat server running on a V6 box was
> claiming to support a couple of ECDHE ciphers, and yet ran into problems
> when a browser actually asked for them, resulting in the browser rejecting
> the server with extreme prejudice.
>
> --
> JHHL
> --
> This is the Java Programming on and around the IBM i (JAVA400-L) mailing
> list
> To post a message email: JAVA400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/java400-l
> or email: JAVA400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/java400-l.