JDK-8170035 : When determining the ciphersuite lists there is no debug output for disabled suites.
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 6u131,7u121,8u111
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2016-11-19
  • Updated: 2018-10-16
  • Resolved: 2016-11-23
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7 JDK 8 JDK 9 Other
7u191Fixed 8u181Fixed 9 b147Fixed openjdk7uFixed
Description
diff --git a/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java b/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
--- a/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
+++ b/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
@@ -403,6 +403,12 @@
                             EnumSet.of(CryptoPrimitive.KEY_AGREEMENT),
                             suite.name, null)) {
                         suites.add(suite);
+                    } else {
+                        if (Debug.isOn("sslctx") && Debug.isOn("verbose")) {
+                            System.out.println(
+                                "Ignoring Disabled cipher suite: "
+                                + suite.name);
+                        }
                     }
                 } else if (debug != null &&
                         Debug.isOn("sslctx") && Debug.isOn("verbose")) {
Comments
The above code snippet probably needs a debug != null check added to the mix, similar to the if statement further down in the code snippet (part of the diff context).
22-11-2016