[jboss-jira] [JBoss JIRA] (ELY-793) Using @STRENGTH keyword in CipherSuiteSelector.fromString should cause descending sorting

Justin Cook (JIRA) issues at jboss.org
Wed Sep 5 15:37:00 EDT 2018


     [ https://issues.jboss.org/browse/ELY-793?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Justin Cook reassigned ELY-793:
-------------------------------

    Assignee: Justin Cook


> Using @STRENGTH keyword in CipherSuiteSelector.fromString should cause descending sorting
> -----------------------------------------------------------------------------------------
>
>                 Key: ELY-793
>                 URL: https://issues.jboss.org/browse/ELY-793
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: SSL
>    Affects Versions: 1.1.0.Beta14
>            Reporter: Ondrej Kotek
>            Assignee: Justin Cook
>
> Using {{@STRENGTH}} keyword in {{CipherSuiteSelector.fromString}} should cause descending sorting of cipher suites, like OpenSSL does, e.g. {{openssl ciphers -v 'ALL:!ADH:@STRENGTH'}}. There is comparator in {{SortByAlgorithmKeyLengthCipherSuiteSelector}} [1].
> Or, am I wrong? Are cipher suites in {{javax.net.ssl.SSLParameters}} expected in ascending order? (Does it matter?) Will the OpenSSL provider expect ascending order? (Or will it parse cipher string itself?)
> The JavaDoc [2] should mention whether the sorting is ascending or descending.
> [1] https://github.com/wildfly-security/wildfly-elytron/blob/7666231fa76b95c3c97eed0d16968a5f77a7de22/src/main/java/org/wildfly/security/ssl/CipherSuiteSelector.java#L730
> [2] https://github.com/wildfly-security/wildfly-elytron/blob/7666231fa76b95c3c97eed0d16968a5f77a7de22/src/main/java/org/wildfly/security/ssl/CipherSuiteSelector.java#L356



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list