[DIRAPI-51] Add cipher suite support to LdapConnectionConfig

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.0.0-M5
• Fix Version/s: 1.0.0-M6
• Assignee: Pierre-Arnaud Marcelot
• Reporter: Daniel Fisher
• Created: 01/Jul/11 15:07
• Updated: 20/Jan/12 08:25
• Resolved: 06/Jul/11 16:39

Description

The current implementation of LdapConnectionConfig exposes properties for KeyManager[] and TrustManager[], but not supported cipher suites. Some clients like to control ciphers on a connection-by-connection basis, restricting to only certain strong ciphers. See http://download.oracle.com/javase/6/docs/api/javax/net/ssl/SSLSocketFactory.html

It may be more expedient to remove the KeyManager and TrustManager properties and expose a single property for an SSLSocketFactory.