changeset 16139:a950ce755659

8170035: When determining the ciphersuite lists, there is no debug output for disabled suites. Summary: Provide extra debugging output for JSSE that displays disabled cipher suites Reviewed-by: vinnie, wetmore
author jnimeh
date Tue, 22 Nov 2016 20:54:32 -0800
parents 67d3235a317f
children ff6e7619daf8
files src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
diffstat 1 files changed, 7 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java	Wed Nov 23 10:12:01 2016 +0800
+++ b/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java	Tue Nov 22 20:54:32 2016 -0800
@@ -403,6 +403,13 @@
                             EnumSet.of(CryptoPrimitive.KEY_AGREEMENT),
                             suite.name, null)) {
                         suites.add(suite);
+                    } else {
+                        if (debug != null && Debug.isOn("sslctx") &&
+                                Debug.isOn("verbose")) {
+                            System.out.println(
+                                    "Ignoring disabled cipher suite: " +
+                                            suite.name);
+                        }
                     }
                 } else if (debug != null &&
                         Debug.isOn("sslctx") && Debug.isOn("verbose")) {