[jboss-jira] [JBoss JIRA] (ELY-1607) Revise cipher suites exposed by Elytron
Martin Choma (JIRA)
issues at jboss.org
Thu Jul 12 09:11:01 EDT 2018
[ https://issues.jboss.org/browse/ELY-1607?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13604411#comment-13604411 ]
Martin Choma edited comment on ELY-1607 at 7/12/18 9:10 AM:
------------------------------------------------------------
This is interesting (design) question. If cipher suite is not implemented in OpenSSL (but are in java), is that reason we cannot expose in Elytron?
But to answer your question I would look at https://www.openssl.org/docs/manmaster/man1/ciphers.html (But I think you also look there)
Could you list ciphersuites which are not in OpenSSL?
was (Author: mchoma):
This is interesting (design) question. If cipher suite is not implemented in OpenSSL (but are in java), is that reason we cannot expose in Elytron?
But to answer your question I would look at https://www.openssl.org/docs/manmaster/man1/ciphers.html (But I think you also look there)
> Revise cipher suites exposed by Elytron
> ---------------------------------------
>
> Key: ELY-1607
> URL: https://issues.jboss.org/browse/ELY-1607
> Project: WildFly Elytron
> Issue Type: Bug
> Components: SSL
> Affects Versions: 1.4.0.Final
> Reporter: Martin Choma
> Assignee: Justin Cook
> Priority: Blocker
> Fix For: 1.4.1.CR1
>
>
> I know there have been discussed earlier we should revise/update database and defaults regularly.
> Checking few ciphersuites from java cipher suite list [1]. I have noticed:
> * Elytron is missing CHACHA20 variants introduced in rfc 7905
> * missing ciphersuites from RFC 6209
> * ...
> Please revise content of MechanismDatabase.properties
> [1] https://docs.oracle.com/javase/10/docs/specs/security/standard-names.html#jsse-cipher-suite-names
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
More information about the jboss-jira
mailing list