Questions tagged [jsse]

JSSE stands for Java Secure Sockets Extension and is the standard way in Java to use the SSL/TLS protocol. It's based on a provider system, where you can extend the abilities shipped with your Java runtime (JRE) by adding additional providers to support e.g. more TLS cipher suites.

3 questions
7
votes
1 answer

JSSE recommended cipher suites

In the wake of POODLE I am reviewing the configuration of a number of Tomcat servers running on the JSSE connector. In order to work out what ciphers JSSE supported I wrote a little snippet that emitted all the available ciphers, the result…
2
votes
2 answers

Java support for TLS_DHE_RSA_WITH_AES_128_CCM

My test tool uses java and I need it to use TLS_DHE_RSA_WITH_AES_128_CCM. Does standard java (Oracle) support CCM cipher suites? I am seeing oracle links mentioning CCM but am not able to make it work. Will any policy or setting change make it…
1
vote
0 answers

How to extract Wireshark keylog from a Java JSSE TLSv1.3 Session

Is it possible to extract the Wireshark keylog information directly from the TLSv1.3 handshake in a Java app? If so, how do I map the fields, or is additional material not shared in the handshake required? From the following links, I believe I…
Yuri Schimke
  • 111
  • 4