How do I disable cipher suite using java.security

Question

How can I disable a particular cipher suite in java.security?

For example, I wish to disable this SSL_RSA_WITH_3DES_EDE_CBC_SHA .

How should I add it in using the command below?

jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \
EC keySize < 224

And finally, how to verify if it is disabled?

Answer 1

Did you try to append the suite name to the end of the line?

According to the post a full cipher suite name or any part of it could be used as a property value.

So, I presume this should work:

jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \
EC keySize < 224

Answer 2

Found what I wanted here.