8170035: When determining the ciphersuite lists, there is no debug output for disabled suites.
Summary: Provide extra debugging output for JSSE that displays disabled cipher suites
Reviewed-by: vinnie, wetmore
--- a/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java Wed Nov 23 10:12:01 2016 +0800
+++ b/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java Tue Nov 22 20:54:32 2016 -0800
@@ -403,6 +403,13 @@
EnumSet.of(CryptoPrimitive.KEY_AGREEMENT),
suite.name, null)) {
suites.add(suite);
+ } else {
+ if (debug != null && Debug.isOn("sslctx") &&
+ Debug.isOn("verbose")) {
+ System.out.println(
+ "Ignoring disabled cipher suite: " +
+ suite.name);
+ }
}
} else if (debug != null &&
Debug.isOn("sslctx") && Debug.isOn("verbose")) {