From 3129372e53fb976e8bfdcc6739418685322c18c1 Mon Sep 17 00:00:00 2001
From: Tobias Kellner <tobias.kellner@iaik.tugraz.at>
Date: Tue, 26 Aug 2014 16:12:12 +0200
Subject: Block some more SSL cipher suites for Java 8

---
 .../src/main/java/at/gv/egiz/bku/spring/SSLSocketFactoryBean.java    | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'bkucommon')

diff --git a/bkucommon/src/main/java/at/gv/egiz/bku/spring/SSLSocketFactoryBean.java b/bkucommon/src/main/java/at/gv/egiz/bku/spring/SSLSocketFactoryBean.java
index c3758a47..f49c1c17 100644
--- a/bkucommon/src/main/java/at/gv/egiz/bku/spring/SSLSocketFactoryBean.java
+++ b/bkucommon/src/main/java/at/gv/egiz/bku/spring/SSLSocketFactoryBean.java
@@ -56,6 +56,7 @@ public class SSLSocketFactoryBean implements FactoryBean {
       "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA," +
       "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA," +
       "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA," +
+      "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,"+
       "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256," +
       "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384," +
       "TLS_ECDHE_ECDSA_WITH_NULL_SHA," +
@@ -63,6 +64,7 @@ public class SSLSocketFactoryBean implements FactoryBean {
       "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA," +
       "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA," +
       "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA," +
+      "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,"+
       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256," +
       "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384," +
       "TLS_ECDH_RSA_WITH_NULL_SHA," +
@@ -70,13 +72,16 @@ public class SSLSocketFactoryBean implements FactoryBean {
       "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA," +
       "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA," +
       "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA," +
+      "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,"+
       "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256," +
       "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384," +
       "TLS_ECDHE_RSA_WITH_NULL_SHA," +
       "TLS_ECDHE_RSA_WITH_RC4_128_SHA," +
       "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA," +
       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA," +
+      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256," +
       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA," +
+      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,"+
       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256," +
       "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384," +
       "TLS_ECDH_anon_WITH_NULL_SHA," +
-- 
cgit v1.2.3