Search code examples
javatomcatencryptionjsse

JSSE Configuration in Tomcat - enable AES256 cipher

What are the ciphers supported by JSSE in Apache Tomcat server? How can i enable AES256 and reorder the ciphers?

Solution

  • If you aren't using the APR native connector, Tomcat supports whatever Java supports, which does include AES256, possibly requiring the unlimited-strength crypto JARs.

    If you are using native APR, Tomcat supports whatever its OpenSSL supports, which you can determine, somehow, via the OpenSSL.exe command.

    The enabled cipher suites should be configurable in the Connector element of server.xml.