How to locate and configure SSL cipher suites

hi all,
i wanted to knw how Ciphersuites that are used in SSL Connections are picked up by the JVM or whoever is responsible for establishing the connection at lower level. I mean there are methods in SSLSocketFactory, HttpsURLConnection named getEnabledCipherSuites(). I was just wondering where these default cipher suites are picked up. Is there any configuration file or some setting where we can add our own cipher suite to the list?
Please advice.
Thanks in advance :)
Arun

hi,
As already we have discussed this, we can set the ciphersuite used in the SSLConnection using SSLSocket.setEnabledCIpherSuite() function only. And getSupportedCipherSuites() function returns the list of cipher suites that are supported by the connection.
But i want to set ciphersuite in SSLConnection using HttpsURLConnection. Under this class (HttpsURLConnection) there is no such method where u can specify the ciphersuite.
So i am trying to find out when an SSL connection is setup from where does the JVM loads the cipher suites? I checked the All the basic classes in javax.net.ssl package and all contain the methods as abstract. So if anybody has any idea regarding where these supported cipher suites are located in jdk please let me knw.
Thanks in advance :)
Arun

Similar Messages

  • How to add a Cipher Suite using RSA 1024 algorithm to the 'SSL Cipher Suite Order' GPO

    Following a VA test the Default Domain GPO has been set to enable the SSL Cipher Suite Order.  Following the change Symantec Endpoint Protection Manager doesn't work properly as the the Home, Monitors and Reports pages are blank and an Schannel error is
    logged in the SEPM server's event log.
    I have spoken to Symantec and I have been told that we need to allow the RSA 1024 bit algorithm but they can't tell me which cipher suite this would be.  I have looked in the GPO setting and can't see an RSA 1024 suite but have found some in this article:
    http://tools.ietf.org/html/draft-ietf-tls-56-bit-ciphersuites-01
    I want to know how to add an additional cipher suite into the setting safely.  Am I able to just add the suite into the GPO setting (eg TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA) or do I need to do anything else beforehand?
    If anyone has any advice regarding this or cipher suite orders and troubleshooting SSL problems it would be much appreciated,
    Thanks
    Chris

    Hi Chris,
    Based on my research, RSA_EXPORT1024_DES_CBC_SHA is a previous cipher suite, which is supported, you can enable it use
    SSL Cipher Suite Order policy setting under Administrative Templates\Network\SSL Configuration Settings.
    More information for you:
    TLS/SSL Cryptographic Enhancements
    http://technet.microsoft.com/en-us/library/cc766285(v=WS.10).aspx
    Best Regards,
    Amy

  • How to install and configure the SQL Server

    Hi All,
    We have to install SQL server in the new server because the old server is crash and need to upgrade. Please advice How to install and configure the SQL Server to run SAP Business One 8.8 successfully and what part we do have to give attention.
    Kind Rgds,
    Steve

    Hi,
    Try this solution:
    The step-by-step installation guide can be found in the documentation included in the installation media. (\Documentation\SystemSetup\AdministratorGuide_SQL.pdf).
    Below are some important parts that you should pay attention to during the Installation process.
    Resolution
    Collation setting: It must be set as SQL_Latin1_General_CP1_CI_AS,even the company DB is non-english location. The company DB will be created as corresponding collation settings automatically.
    Instance and TCP Port : It is recommended to run SBO on default instance and TCP port 1433. Otherwise,some optional components such as B1i may not work properly.
    Native Client: SQL Server Native Client should be installed on every client machine to enable the ODBC connection to DB server.
    Rgds,

  • SSL cipher suites with v3

    Any way to adjust which SSL cipher suites are used with the messaging agent on version 3 of messenger? There are a few that are not compatible with our firewall and we need to disable them. It's keeping iOS clients from connecting.

    Palo Alto Networks firewall. We enforce SSL decryption on all traffic and any suite that uses Diffie-Hellman key exchange isn't supported. Has to be RSA key exchange.
    Originally Posted by ahidalgo
    Which SSL cipher suites are not compatible with your firewall, just curious. Whose firewall are you using?
    Al
    On 2/27/2015 at 9:26 PM, jarrodholder<[email protected]> wrote:
    Any way to adjust which SSL cipher suites are used with the messaging
    agent on version 3 of messenger? There are a few that are not
    compatible with our firewall and we need to disable them. It's keeping
    iOS clients from connecting.
    jarrodholder
    jarrodholder's Profile: https://forums.novell.com/member.php?userid=1616
    View this thread: https://forums.novell.com/showthread.php?t=482111

  • How to add and configure an additional hard drive.

    I will like to know how to install and configure an additional hard drive. I will like to know how to configure the server so the services will start using this additional space. Intel based Xserver. late 2009.
    Erik.

    Your question is a little vague... "services will start using this additional space..."?
    Let's see, where to start.
    You don't say how many drives you currently have in your server. If all three drive bays are used then you'll probably need some kind of external array. There are many to choose from.
    If you have a spare bay (or two) then you can buy a new drive bay (ADM - Apple Drive Module) (several online vendors still sell them), but you can't just put a bare drive into an empty bay since the blank trays lack the electrical connectors to support a drive.
    Once you work out your drive options (internal vs. external, capacity, etc.) you can work out a plan to use them.
    The specifics of that will depend on what services you're using. Are you web serving? file serving? home directory serving? or maybe mail? database? something else.
    In general, once a drive is attached and initialized (via Disk Utility.app) it's up to you to configure the individual server components to use the space. That typically involves changing some kind of configuration parameter (e.g. httpd.conf for apache, /etc/my.cnf for MySQL, or various options in Server.app for other services) to tell them to use the new volume.
    If you want to migrate the entire server to the new drive (e.g. the new drive is larger/faster) then you can clone your existing OS drive to the new drive and just reboot.
    So, you see, there are many ways to do this. Everyone's situation will be a little different.

  • How to install and configure smtp on iis 7 on windows 7

    how to install and configure smtp on iis 7 on windows 7?
    Thanks!

    Here is an article that you may find useful http://eriglen.blogspot.com/2013/01/step-by-step-configuring-automatic-storage-management-on-standalone-server-with-oracle-enterprise-linux-and-oracle-11g-R2-using-external-storage-managed-by-openfiler.html

  • How to install and configure Eclipse???

    Can any one guide me how to install and configure Eclipse to use it with jdk 1.5??

    how to install eclipse?
    you don't need to install eclipse just extract it to a specific path...
    install j2se 1.5 then eclipse will automatically detect it...

  • How to install and configure oracle secure backup(osb-10.4.0.3.0_linux.x64) in linux

    Hello,
    We are planning to install and configure Oracle Secure Backup Version 10.4 in Linux server. I had searched documents and i have not find any relevant steps to install and configure in OEL 6.2.
    Can anyone please suggest me how to install and configure OSB.
    Regards,
    Anil

    Hi
    Installing OSB on Oracle Linux is just the same as installing on any other supported linux and is described in Installation and Configuration guide. Just stick with the directories and procedure described in install guide and you should be fine.
    For media server choose a physical host due to performance considerations. I think it is mentioned in docs somewhere.
    Regards,
    Mitja

  • How to install and configure management agents on Tru64 Cluster

    We are busy rolling out the Oracle 10g Grid Control to our enterprise and one of our targets is a two-node Tru64 cluster with shared file systems, i.e., each node can see (read/write) the file systems concurrently. Trucluster software is responsible for the clustering management.
    On node1 we have a set of databases each with its own dedicated listener; the same for node2. Each cluster managed service set has its own logical hostname. For example, we have on node1:
    db1 (database)
    listener-db1 (listener for db1)
    node-db1 (logical hostname for db1 service)
    Upon switchover or failover, the database and listener are brought up on node2 and we need to cater for this in our management agent configuration. I am trying to work out how we install and configure the management agents in such a configuration. Has anyone done this or does anyone know how to set up the agents suitably?
    I have already installed the agent on one of the nodes - that worked fine, and I have even managed to start another agent up using the installed software home on the other node using "agentca -f"

    You the Cluster type of configuration. It is documented in the install guide you have

  • How to integrate and configure SMS API CC&B

    Hi All,
    Can you just guide me how to integrate and configure SMS API in CC&B.as per my knowledge sending email from ccb is possible but i was not able to find how SMS application can be implemented in CC&B.it very vital in my project to send SMS alert from CC&B to end users and also let me know can we customise and configure third party vendor SMS API in CC&B which was developed in various technologies or we have to develop our own SMS API for application
    Thanks,
    Srinivas Varadarajan

    There is no built in application for SMS in CCB you need a third party application.
    One of our partner company has a readymade add on module with complete GUI interface for CCB, this application allows you to define rules and conditions using standard select statements to filter receipent for SMS. This application can work with any service provider all you need is a SMS gateway. If you do not have a SMS gateway the same can be provided in certain countries.

  • How to install and configure ms exchange server 2007 both role hub and edge transport role in one network

    How to install and configure ms exchange server 2007 both role hub and edge transport role in one network 

    Hi,
    Edge role is design for perimeter networks, to keep security risks minimum.  So it’s not recommended to have edge role in internal network. Must have separate network or subnet for edge services.
    If you are playing around it in labs, then you can put edge role within same subnet as other exchange roles and no specific requirements in that case.
    Thanks.
    MachPanel - Premium Cloud Automation Solution

  • Added movie (already converted to mp4 format) to iTunes library in my PC, syncronized to iPad2, now how to locate and play it in iPad2?

    Added movie (already converted to mp4 format) to iTunes library in my PC, syncronized to iPad2, now how to locate and play it in iPad2?

    On your computer's iTunes if you select that video and do 'get info' (control-I), then on the popup on the Options tab change it's 'Kind' to 'Movie' from 'Home Video'.
    To sync it to your iPad, connect the iPad and select it on the left-hand sidebar of your computer's iTunes (if you have iTunes 11 on your computer then you can enable the sidebar via option-command-S on a Mac, control-S on a PC), and then on the right-hand side use the Movies/Films tab to select and sync it to the iPad's Videos app.

  • How To Install and Configure External Drivers for the JDBC & JMS Adapters

    Hello colleagues,
    Please I need a How To Install and Configure External Drivers for the JDBC & JMS Adapters version 7.10.
    VERSION 7.10.
    BBDD ORACLE - ojdbc14.jar
    Regards.

    Hi ,
    Uisng  Java Support Package Manager (JSPM) to deploy com.sap.aii.adapter.lib.sda file,
    refer this two links,the procedure available how to deploy using JSPM.
    http://help.sap.com/saphelp_nwpi71/helpdata/EN/33/e6fb40f17af66fe10000000a1550b0/content.htm
    http://help.sap.com/saphelp_nwpi71/helpdata/EN/1f/c45b4211aac353e10000000a1550b0/frameset.htm
    Regards,
    Raj

  • How To Install and Configure External Drivers for JDBC & JMS Adapters"

    hello ,
    where can i download  this Guide "How To Install and Configure External Drivers for JDBC & JMS Adapters"?
    thanks
    best regards
    pietro greco

    Hi Eleonore Rosenthal, 
    Could you please check the below links:
    http://help.sap.com/saphelp_nwpi71/helpdata/en/33/e6fb40f17af66fe10000000a1550b0/content.htm
    http://help.sap.com/saphelp_sm32/helpdata/en/33/e6fb40f17af66fe10000000a1550b0/frameset.htm
    Regards,
    S.Manu.

  • How to Install and Configure Workflow For PO in Oracle Apps Version R12

    Hi,
    Please do let me know how to install and configure Workflow for Purchasing in Oracle Apps R12 Version.
    I want to the standard setup of workflow configuration for the PO.
    Thanks and Regards
    Srini

    Hi Suresh
    Only the latest version of WLP which is WLP 10.3.2 has facility to integrate with Oracle UCM with Adapaters. So make sure that you do have this latest version of WLP 10.3.2. Older versions like WLP 10.3 do not have this provision.
    Also I guess when you install and configure this Oracle UCM Adapater and choose above WLP Home, I guess these modules may be added in already installed WLP folders. I checked on my side for WLP 10.3.2 and I could NOT find the modules you mentioned. So most probably you may be missing some installation/configuration stuff from UCM side.
    Thanks
    Ravi Jegga

Maybe you are looking for