[jboss-jira] [JBoss JIRA] (ELY-1607) Revise cipher suites exposed by Elytron
[
https://issues.jboss.org/browse/ELY-1607?page=com.atlassian.jira.plugin.s...
]
Martin Choma commented on ELY-1607:
-----------------------------------
This is interesting (design) question. If cipher suite is not implemented in OpenSSL (but
are in java), is that reason we cannot expose in Elytron?
But to answer your question I would look at
https://www.openssl.org/docs/manmaster/man1/ciphers.html (But I think you also look
there)
Revise cipher suites exposed by Elytron
---------------------------------------
Key: ELY-1607
URL: https://issues.jboss.org/browse/ELY-1607
Project: WildFly Elytron
Issue Type: Bug
Components: SSL
Affects Versions: 1.4.0.Final
Reporter: Martin Choma
Assignee: Justin Cook
Priority: Blocker
Fix For: 1.4.1.CR1
I know there have been discussed earlier we should revise/update database and defaults
regularly.
Checking few ciphersuites from java cipher suite list [1]. I have noticed:
* Elytron is missing CHACHA20 variants introduced in rfc 7905
* missing ciphersuites from RFC 6209
* ...
Please revise content of MechanismDatabase.properties
[1]
https://docs.oracle.com/javase/10/docs/specs/security/standard-names.html...
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)