Hi Artem, thanks for your answer. excludedCipherSuites: [] includes all Suites.
I included some suites in supportedCipherSuites: but they get ignored. Is this a desirable behavior? I would have thought that supportedCipherSuites overrides the default value of excludedCipherSuites. (no offence to the developers) Thanks in advance. Aaron Am Donnerstag, 15. März 2018 13:41:35 UTC+1 schrieb Artem Prigoda: > > Hi Aaron, > > I believe all SHA-based cipher suites are disabled by default since > Dropwizard 1.0. Take a look at the Dropwizard configuration reference [1]: > By default all ciphers that match the .*_(MD5|SHA|SHA1)$ regex are excluded. > If you want to allow legacy cipher suites for TLS1 and TLS1.1, you can set > excludedCipherSuites: [] in your Dropwizard configuration. > > [1] http://www.dropwizard.io/1.3.0/docs/manual/configuration.html#https > > Best, > Artem > -- You received this message because you are subscribed to the Google Groups "dropwizard-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
