Skip to content

Mozilla's list of recommended SSL/TLS ciphers, translated into their JSSE names

Notifications You must be signed in to change notification settings

ericbets/rec-ciphers

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation

Transfer OpenSSL cipher names to JSSE cipher names

This shell script takes Mozilla's SSL/TLS recommended cipher list and transfers those ciphers from their OpenSSL name into their JSSE names. It uses IANA's TLS Cipher Suite List, which is what the Java's JSSE cipher suite names correspond to.

IANA List

http://www.iana.org/assignments/tls-parameters/tls-parameters.xml

Usage

$ ./jlist.sh 

Time Saver

This is all that you need. It's current as of April 2015, the publication date.

	public static final String[] SAFE_CIPHER_SUITES = new String[] {			
		"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_DHE_DSS_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256","TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256","TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256","TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256","TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384","TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384","TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384","TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384","TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256","TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256","TLS_DHE_DSS_WITH_AES_128_CBC_SHA256","TLS_DHE_RSA_WITH_AES_256_CBC_SHA256","TLS_DHE_DSS_WITH_AES_256_CBC_SHA256","TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
	};

	public static String[] intersection(String[] stringSetA, String[] stringSetB) {
		Set<String> intersection = new HashSet<String>(
				Arrays.asList(stringSetA));
		intersection.retainAll(Arrays.asList(stringSetB));
		return intersection.toArray(new String[intersection.size()]);
	}

About

Mozilla's list of recommended SSL/TLS ciphers, translated into their JSSE names

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages