[CAMEL-12262] DEFAULT_CIPHER_SUITES_FILTER_EXCLUDE Incorrect

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.21.0
• Component/s: documentation
• Estimated Complexity: Unknown
• Assignee: Claus Ibsen
• Reporter: Lyubomir
• Created: 13/Feb/18 14:04
• Updated: 20/Feb/18 11:14
• Resolved: 20/Feb/18 11:14

Description

The official documentation states the default cipher suites exclude filters are:

.*NULL.*
.*anon.*
.*DES.* Camel 2.15.4 =>Means 3DES **is** excluded
.*EXPORT.* Camel 2.15.4

The default cipher suite exclude filter declared is:

/camel-core/src/main/java/org/apache/camel/util/jsse/BaseSSLContextParameters.java

    protected static final List<String> DEFAULT_CIPHER_SUITES_FILTER_EXCLUDE =
        Collections.unmodifiableList(Arrays.asList(".*_NULL_.*", ".*_anon_.*", ".*_EXPORT_.*", ".*_DES_.*"));

According to the documentation 3DES will be excluded by default. Based on the code only DES will be excluded.

Issue Links

• relates to: CAMEL-12281 Camel JSSE filter algorithm aligned as how CXF does it