Ciphers definitions

[abarak <al...@cisco.com>]

Hello,

I would like limit the ciphers list on my SSLBrokerService.
how should i accomplish that?

Thanks in advanced,
abarak
-- 
View this message in context: http://old.nabble.com/Ciphers-definitions-tp27456546p27456546.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Ciphers definitions

[Gary Tully <ga...@gmail.com>]

You might want to have a look at
https://issues.apache.org/activemq/browse/AMQ-2384
there is a patch attached that make a first pass at enabling this via
properties but it needs more work.
Vote for that issue in any event to increase the priority order of it or
make it work if you can :-)
thanks.

On 4 February 2010 19:49, Bruce Snyder <br...@gmail.com> wrote:

> On Thu, Feb 4, 2010 at 10:30 AM, abarak <al...@cisco.com> wrote:
> >
> > Hello,
> >
> > I would like limit the ciphers list on my SSLBrokerService.
> > how should i accomplish that?
>
> The only way to do that is via the javax.net.ssl.SSLServerSocket
> object's setEnabledCipherSuites method:
>
>
> http://java.sun.com/javase/6/docs/api/javax/net/ssl/SSLServerSocket.html#setEnabledCipherSuites(java.lang.String[])
>
> Unfortunately the SSLServerSocket is not exposed anywhere in ActiveMQ
> to be able to utilize that method. Please create a JIRA issue for this
> as a new feature here:
>
> https://issues.apache.org/activemq/secure/CreateIssue!default.jspa
>
> Bruce
> --
> perl -e 'print
> unpack("u30","D0G)U8V4\@4VYY9&5R\"F)R=6-E+G-N>61E<D\!G;6%I;\"YC;VT*"
> );'
>
> ActiveMQ in Action: http://bit.ly/2je6cQ
> Blog: http://bruceblog.org/
> Twitter: http://twitter.com/brucesnyder
>



-- 
http://blog.garytully.com

Open Source Integration
http://fusesource.com

Re: Ciphers definitions

[Bruce Snyder <br...@gmail.com>]

On Thu, Feb 4, 2010 at 10:30 AM, abarak <al...@cisco.com> wrote:
>
> Hello,
>
> I would like limit the ciphers list on my SSLBrokerService.
> how should i accomplish that?

The only way to do that is via the javax.net.ssl.SSLServerSocket
object's setEnabledCipherSuites method:

http://java.sun.com/javase/6/docs/api/javax/net/ssl/SSLServerSocket.html#setEnabledCipherSuites(java.lang.String[])

Unfortunately the SSLServerSocket is not exposed anywhere in ActiveMQ
to be able to utilize that method. Please create a JIRA issue for this
as a new feature here:

https://issues.apache.org/activemq/secure/CreateIssue!default.jspa

Bruce
-- 
perl -e 'print unpack("u30","D0G)U8V4\@4VYY9&5R\"F)R=6-E+G-N>61E<D\!G;6%I;\"YC;VT*"
);'

ActiveMQ in Action: http://bit.ly/2je6cQ
Blog: http://bruceblog.org/
Twitter: http://twitter.com/brucesnyder