You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@camel.apache.org by "Claus Ibsen (JIRA)" <ji...@apache.org> on 2018/02/13 14:26:00 UTC

[jira] [Reopened] (CAMEL-12262) DEFAULT_CIPHER_SUITES_FILTER_EXCLUDE Incorrect

     [ https://issues.apache.org/jira/browse/CAMEL-12262?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Claus Ibsen reopened CAMEL-12262:
---------------------------------

Yeah good point about 3DES - it should likely be excluded as well.

> DEFAULT_CIPHER_SUITES_FILTER_EXCLUDE Incorrect
> ----------------------------------------------
>
>                 Key: CAMEL-12262
>                 URL: https://issues.apache.org/jira/browse/CAMEL-12262
>             Project: Camel
>          Issue Type: Task
>          Components: documentation
>            Reporter: Lyubomir
>            Assignee: Claus Ibsen
>            Priority: Minor
>             Fix For: 2.21.0
>
>
> The [official documentation|http://camel.apache.org/camel-configuration-utilities.html] states the default cipher suites exclude filters are:
> {code:java}
> .*NULL.*
> .*anon.*
> .*DES.* Camel 2.15.4 =>Means 3DES **is** excluded
> .*EXPORT.* Camel 2.15.4
> {code}
> The default cipher suite exclude filter declared is:
> {code:java}
> /camel-core/src/main/java/org/apache/camel/util/jsse/BaseSSLContextParameters.java
> {code}
> {code:java}
>     protected static final List<String> DEFAULT_CIPHER_SUITES_FILTER_EXCLUDE =
>         Collections.unmodifiableList(Arrays.asList(".*_NULL_.*", ".*_anon_.*", ".*_EXPORT_.*", ".*_DES_.*"));
> {code}
> According to the documentation 3DES will be excluded by default. Based on the code only DES will be excluded.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)