Experimenting further, I discovered something else. If I use:
the HTTPS call succeeds and no errors are reported. But if I use:
then I DO get an error:
errorjavax.net.ssl.SSLException: No available certificate or key corresponds to the SSL cipher suites which are enabled.
I would expect ciphers="Hi Mom!" to give me the same error, and not just ignore the value and default to "all". Looks like a bug.