8170035: When determining the ciphersuite lists, there is no debug output for disabled suites.
authorjnimeh
Tue, 22 Nov 2016 20:54:32 -0800
changeset 42221 6bd0eb3735b8
parent 42220 d5f5dffe487e
child 42222 a7292520b24a
8170035: When determining the ciphersuite lists, there is no debug output for disabled suites. Summary: Provide extra debugging output for JSSE that displays disabled cipher suites Reviewed-by: vinnie, wetmore
jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
--- a/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java	Wed Nov 23 10:12:01 2016 +0800
+++ b/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java	Tue Nov 22 20:54:32 2016 -0800
@@ -403,6 +403,13 @@
                             EnumSet.of(CryptoPrimitive.KEY_AGREEMENT),
                             suite.name, null)) {
                         suites.add(suite);
+                    } else {
+                        if (debug != null && Debug.isOn("sslctx") &&
+                                Debug.isOn("verbose")) {
+                            System.out.println(
+                                    "Ignoring disabled cipher suite: " +
+                                            suite.name);
+                        }
                     }
                 } else if (debug != null &&
                         Debug.isOn("sslctx") && Debug.isOn("verbose")) {