[OPENEJB-1856] Allow User selectable Cipher Suites to enhance ejbds SSL security

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 4.0.0
• Component/s: server
• Labels: security
• Environment: All
• Assignee: Unassigned
• Reporter: Jonathan S Fisher
• Created: 03/Jul/12 21:41
• Updated: 03/Jul/12 21:42

Description

Currently, "SSL_DH_anon_WITH_RC4_128_MD5" is harded as the only available cipher suite when using SSL. While this provides integrtiy and eavesdorpping protection, it offers no protection from MITM attacks.

Allowing the user to specify the protocol suite, then having them also use the normal javax.net.ssl.trustStore and javax.net.ssl.keyStore parameters will allow fully secure connections to be established.