Using @STRENGTH keyword in CipherSuiteSelector.fromString should cause descending sorting ----------------------------------------------------------------------------------------- Key: ELY-793 URL: https://issues.jboss.org/browse/ELY-793 Project: WildFly Elytron Issue Type: Bug Components: SSL Affects Versions: 1.1.0.Beta14 Reporter: Ondrej Kotek Assignee: Darran Lofthouse Using {{@STRENGTH}} keyword in {{CipherSuiteSelector.fromString}} should cause descending sorting of cipher suites, like OpenSSL does, e.g. {{openssl ciphers -v 'ALL:!ADH:@STRENGTH'}}. There is comparator in {{SortByAlgorithmKeyLengthCipherSuiteSelector}} [1]. Or, am I wrong? Are cipher suites in {{javax.net.ssl.SSLParameters}} expected in ascending order? (Does it matter?) Will the OpenSSL provider expect ascending order? (Or will it parse cipher string itself?) The JavaDoc [2] should mention whether the sorting is ascending or descending. [1] https://github.com/wildfly-security/wildfly-elytron/blob/7666231fa76b95c3... [2] https://github.com/wildfly-security/wildfly-elytron/blob/7666231fa76b95c3...