java - Which Cipher Suites to enable for SSL Socket? -
I am using SSLSocket Java to secure communication between the client and server programs. The server program also works up to HTTPS requests from web browsers. Of
"", page 371, according sure you should always call setEnabledCipherSuites
your on SSLSocket
/ SSLServerSocket
This For that cipher suit which is ending for your purposes is sufficiently strong.
That being said, I What is a sensible list of cipher suites to restrict sockets? Please note that access to client and server service provider, and that they do not install or install unlimited cryptographic policy files. Do not use anything with exports, that is why crippleware due to export restrictions on strong cryptography Edit: .. 2009 turned to document use A 2009 NIST following, TLS_RSA_WITH_AES_256_CBC_SHA (which you mentioned) listed incluing: SSLSocketFactory
S getDefaultCipherSuites
method can 180 option to create these options TLS_RSA_WITH_AES_256_CBC_SHA
(see I think that that is quite safe) to SSL_RSA_WITH_RC4_128_MD5
(not so sure that is safe, the current state of MD5 is) SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA (not completely sure what does).
TLS_RSA_WITH_NULL_SHA (this Do not use it unless you are sure that you do not have any privacy / privacy).
Tls_rs_vith_3DES_ad_sbk_s Tls_rs_vith_s_l28_sbk_s Tls_rs_vith_s_256_sbk_s Tls_d_diss_vith_3DES_ad_sbk_s Tls_d_rs_vith_3DES_ad_sbk_s Tls_de_diss_vith_3DES_ad_sbk_s Tls_de_rs_vith_3DES_ad_sbk_s Tls_d_diss_vith_s_l28_sbk_s Tls_d_rs_vith_s_l28_sbk_s Tls_de_diss_vith_s_l28_sbk_s Tls_de_rs_vith_s_l28_sbk_s Tls_d_diss_vith_s_256_sbk_s Tls_d_rs_vith_s_256_sbk_s Tls_de_diss_vith_s_256_sbk_s Tls_de_rs_vith_s_256_sbk_s Tls_akda_akdasa_vith_3DES_ad_sbk_s Tls_akda_akdasa_vith_s_l28_sbk_s Tls_akda_akdasa_vith_s_256_sbk_s Tls_akdhe_akdasa_vith_3DES_ad_sbk_s Tls_akdhe_i Sdasy_vith_s_l28_sbk_s Tls_akdhe_akdasa_vith_s_256_sbk_s Tls_akda_rs_vith_3DES_ad_sbk_s Tls_akda_rs_vith_s_l28_sbk_s Tls_akda_rs_vith_s_256_sbk_s Tls_akdhe_rs_vith_3DES_ad_sbk_s Tls_akdhe_rs_vith_s_l28_sbk_s Tls_akdhe_rs_vith_s_256_sbk_s Tls_pask_vith_3DES_ad_sbk_s Tls_pask_vith_s_l28_sbk_s Tls_pask_v Ith_s_256_sbk_s Tls_de_pask_vith_3DES_ad_sbk_s Tls_de_pask_vith_s_l28_sbk_s Tls_de_pask_vith_s_256_sbk_s Tls_rs_pask_vith_3DES_ad_sbk_s Tls_rs_pask_vith_s_l28_sbk_s Tls_rs_pask_vith_s_256_sbk_s Tls_akdhe_akdasa_vith_s_l28_gkm_s256 TLS_akdhe_akdasa_vith_s_256_gkm_s384 TLS_akdhe_akdasa_vith_s_l28_sbk_s256 TLS_akdhe_akdasa_vith_s_256_sbk_s384
Comments
Post a Comment