Changing the cipherSuit being used by Jboss

[sachinshah]

Hi,

I want to access the secured site which is using 128 bit encryption. the ciper suit being used by when i run a sample application to access the same is SSL_RSA_WITH_RC4_128_MD5 where as when running JBoss in debug mode i found that the cipher suit used by JBoss is SSL_RSA_EXPORT_WITH_RC4_40_MD5.

How can i configure JBoss to use SSL_RSA_WITH_RC4_128_MD5 cipher suite

[donahuept]

Does anybody know how to do what Sachin was asking to do in this message, that is, "How can I configure JBoss to use SSL_RSA_WITH_RC4_128_MD5 cipher suite?"

Pat

[haraldgliebe]

Hi,
have you checked if the "https.cipherSuites" system property works? See http://java.sun.com/j2se/1.4.2/docs/guide/security/jsse/JSSERefGuide.html#Customization for more details.

Regards,
Harald

[donahuept]

Harald,

Thanks for your help.

I tried what you said, but did not get it to work. What I did was start JBoss with the following option -Dhttps.cipherSuites=SSL_RSA_WITH_RC4_128_MD5.

I still got the error:
No available certificate corrosponds to the SSL cipher suites which are enabled.

What am I doing wrong? Do you have any idea how I should proceed?

Is there any easy way to in effect do getSupportedCipherSuites() so I can
know if the 128 bit cipher suites if supported by JBoss?

My certificate is supposed to be 128 bit.

Pat