[
https://issues.jboss.org/browse/WFLY-4351?page=com.atlassian.jira.plugin....
]
Stuart Douglas reassigned WFLY-4351:
------------------------------------
Assignee: Darran Lofthouse (was: Stuart Douglas)
Assigning to Darran, as I think this comes under the broader SSL unification effort.
Support for server cipher suite preference
------------------------------------------
Key: WFLY-4351
URL:
https://issues.jboss.org/browse/WFLY-4351
Project: WildFly
Issue Type: Enhancement
Components: Web (Undertow)
Reporter: Nico Schlebusch
Assignee: Darran Lofthouse
Please expose config option in subsystem config to enable server cipher suite preference.
The relevant API call is SSLParameters.setUseCipherSuitesOrder(boolean) in Java 8.
We are busy looking at the security of our web services exposed by Wildfly 8.2.0.Final
when we came across these posts:
http://blog.ivanristic.com/2014/03/ssl-tls-improvements-in-java-8.html
http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSER...
App Server: WildFly 8.2.0.Final
Java: Java 8 Update 31
OS: Linux / gentoo
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)