[jboss-jira] [JBoss JIRA] (WFLY-4351) Support for server cipher suite preference

[Stuart Douglas (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-4351?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Stuart Douglas moved UNDERTOW-378 to WFLY-4351:
-----------------------------------------------

        Project: WildFly  (was: Undertow)
            Key: WFLY-4351  (was: UNDERTOW-378)
    Component/s: Web (Undertow)
                     (was: SSL)


> Support for server cipher suite preference
> ------------------------------------------
>
>                 Key: WFLY-4351
>                 URL: https://issues.jboss.org/browse/WFLY-4351
>             Project: WildFly
>          Issue Type: Enhancement
>          Components: Web (Undertow)
>            Reporter: Nico Schlebusch
>            Assignee: Stuart Douglas
>
> Please expose config option in subsystem config to enable server cipher suite preference. The relevant API call is SSLParameters.setUseCipherSuitesOrder(boolean) in Java 8.
> We are busy looking at the security of our web services exposed by Wildfly 8.2.0.Final when we came across these posts: 
> http://blog.ivanristic.com/2014/03/ssl-tls-improvements-in-java-8.html
> http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html#cipher_suite_preference
> App Server: WildFly 8.2.0.Final
> Java: Java 8 Update 31
> OS: Linux / gentoo



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)