aspose file tools*
The moose likes Security and the fly likes getSupportedCipherSuites() is not giving any af the 256 bit cipher suites Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Spring in Action this week in the Spring forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "getSupportedCipherSuites() is not giving any af the 256 bit cipher suites " Watch "getSupportedCipherSuites() is not giving any af the 256 bit cipher suites " New topic
Author

getSupportedCipherSuites() is not giving any af the 256 bit cipher suites

Gaurav Yadywanshi
Greenhorn

Joined: Dec 13, 2011
Posts: 2
I'm using java version "1.6.0_26".
getSupportedCipherSui tes() does not list 256 bit cipher suites.

How do i get all available cipher suites?

following is the list of ciper suits which I'm getting..

ipher Name - SSL_RSA_WITH_RC4_128_MD5
cipher Name - SSL_RSA_WITH_RC4_128_SHA
cipher Name - TLS_RSA_WITH_AES_128_CBC_SHA
cipher Name - TLS_DHE_RSA_WITH_AES_128_CBC_SHA
cipher Name - TLS_DHE_DSS_WITH_AES_128_CBC_SHA
cipher Name - SSL_RSA_WITH_3DES_EDE_CBC_SHA
cipher Name - SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
cipher Name - SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
cipher Name - SSL_RSA_WITH_DES_CBC_SHA
cipher Name - SSL_DHE_RSA_WITH_DES_CBC_SHA
cipher Name - SSL_DHE_DSS_WITH_DES_CBC_SHA
cipher Name - SSL_RSA_EXPORT_WITH_RC4_40_MD5
cipher Name - SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
cipher Name - SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
cipher Name - SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
cipher Name - TLS_EMPTY_RENEGOTIATION_INFO_SCSV
cipher Name - SSL_RSA_WITH_NULL_MD5
cipher Name - SSL_RSA_WITH_NULL_SHA
cipher Name - SSL_DH_anon_WITH_RC4_128_MD5
cipher Name - TLS_DH_anon_WITH_AES_128_CBC_SHA
cipher Name - SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
cipher Name - SSL_DH_anon_WITH_DES_CBC_SHA
cipher Name - SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
cipher Name - SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
cipher Name - TLS_KRB5_WITH_RC4_128_SHA
cipher Name - TLS_KRB5_WITH_RC4_128_MD5
cipher Name - TLS_KRB5_WITH_3DES_EDE_CBC_SHA
cipher Name - TLS_KRB5_WITH_3DES_EDE_CBC_MD5
cipher Name - TLS_KRB5_WITH_DES_CBC_SHA
cipher Name - TLS_KRB5_WITH_DES_CBC_MD5
cipher Name - TLS_KRB5_EXPORT_WITH_RC4_40_SHA
cipher Name - TLS_KRB5_EXPORT_WITH_RC4_40_MD5
cipher Name - TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
cipher Name - TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
Arshad Noor
Ranch Hand

Joined: Oct 06, 2011
Posts: 34
Have you installed the JCE Unlimited Strength jar file?

Arshad Noor
StrongAuth, Inc.
Tim McGuire
Ranch Hand

Joined: Apr 30, 2003
Posts: 820

This might help if you have installed the unlimited strength jars (there are two) and it still doesn't work:

I first installed the two JCE Unlimited Strength jar files into %JAVA_HOME%/jre/lib/security like the docs said, but I still did not get the 256 bit ciphers.
In my case, that path resolves to C:\program files\java\jdk1.6.0_25\jre\lib\security
I then tried putting the two jars into C:\program files\java\jre\lib\security and it worked!
I checked my path and other system settings and could not find anything that would make me think I was using the JRE outside of JDK, but there it is.

To be fair, the docs do say:
On Win32, for each JDK installation, there may be an additional
JRE installed under the "Program Files" directory. Please make
sure that you install the unlimited strength policy JAR files
for all JREs that you plan to use.


but I wasn't "planning" to use that JRE. I thought it was the one in the JDK.
my list of ciphers before:
SSL_RSA_WITH_RC4_128_MD5
SSL_RSA_WITH_RC4_128_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_DSS_WITH_AES_128_CBC_SHA
SSL_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
SSL_RSA_WITH_DES_CBC_SHA
SSL_DHE_RSA_WITH_DES_CBC_SHA
SSL_DHE_DSS_WITH_DES_CBC_SHA
SSL_RSA_EXPORT_WITH_RC4_40_MD5
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
TLS_EMPTY_RENEGOTIATION_INFO_SCSV
SSL_RSA_WITH_NULL_MD5
SSL_RSA_WITH_NULL_SHA
SSL_DH_anon_WITH_RC4_128_MD5
TLS_DH_anon_WITH_AES_128_CBC_SHA
SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
SSL_DH_anon_WITH_DES_CBC_SHA
SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
TLS_KRB5_WITH_RC4_128_SHA
TLS_KRB5_WITH_RC4_128_MD5
TLS_KRB5_WITH_3DES_EDE_CBC_SHA
TLS_KRB5_WITH_3DES_EDE_CBC_MD5
TLS_KRB5_WITH_DES_CBC_SHA
TLS_KRB5_WITH_DES_CBC_MD5
TLS_KRB5_EXPORT_WITH_RC4_40_SHA
TLS_KRB5_EXPORT_WITH_RC4_40_MD5
TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5

list of ciphers after:
SSL_RSA_WITH_RC4_128_MD5
SSL_RSA_WITH_RC4_128_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_RSA_WITH_AES_256_CBC_SHA
TLS_DHE_DSS_WITH_AES_128_CBC_SHA
TLS_DHE_DSS_WITH_AES_256_CBC_SHA
SSL_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
SSL_RSA_WITH_DES_CBC_SHA
SSL_DHE_RSA_WITH_DES_CBC_SHA
SSL_DHE_DSS_WITH_DES_CBC_SHA
SSL_RSA_EXPORT_WITH_RC4_40_MD5
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
TLS_EMPTY_RENEGOTIATION_INFO_SCSV
SSL_RSA_WITH_NULL_MD5
SSL_RSA_WITH_NULL_SHA
SSL_DH_anon_WITH_RC4_128_MD5
TLS_DH_anon_WITH_AES_128_CBC_SHA
TLS_DH_anon_WITH_AES_256_CBC_SHA
SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
SSL_DH_anon_WITH_DES_CBC_SHA
SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
TLS_KRB5_WITH_RC4_128_SHA
TLS_KRB5_WITH_RC4_128_MD5
TLS_KRB5_WITH_3DES_EDE_CBC_SHA
TLS_KRB5_WITH_3DES_EDE_CBC_MD5
TLS_KRB5_WITH_DES_CBC_SHA
TLS_KRB5_WITH_DES_CBC_MD5
TLS_KRB5_EXPORT_WITH_RC4_40_SHA
TLS_KRB5_EXPORT_WITH_RC4_40_MD5
TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
Joanne Neal
Rancher

Joined: Aug 05, 2005
Posts: 3679
    
  16
Tim McGuire wrote:I checked my path and other system settings and could not find anything that would make me think I was using the JRE outside of JDK

Have you got %SystemRoot%\system32 or c:\windows\system32 in your path ? You'll find a java.exe in there. It uses a registry setting (can't remember the name of it off the top of my head) to decide which JRE to run. It's usually the last normal JRE (not the one included with the JDK) installed.


Joanne
Tim McGuire
Ranch Hand

Joined: Apr 30, 2003
Posts: 820

Joanne Neal wrote:
Tim McGuire wrote:I checked my path and other system settings and could not find anything that would make me think I was using the JRE outside of JDK

Have you got %SystemRoot%\system32 or c:\windows\system32 in your path ? You'll find a java.exe in there. It uses a registry setting (can't remember the name of it off the top of my head) to decide which JRE to run. It's usually the last normal JRE (not the one included with the JDK) installed.


Well, there it is and it's version matches the results when I do java -version
the registry key is HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6

Instead of changing that, I moved the path to the JDK's JRE to the front of the path variable and now everything makes sense. Thanks!

 
 
subject: getSupportedCipherSuites() is not giving any af the 256 bit cipher suites