Users Guide

8 How to Use a Cipher Suite That is Not in the Default List
RSA BSAFE SSL-J 6.2.6 Troubleshooting Guide
SSLJ API
If using the SSLJ API, invoke setCipherSuites() on the SSLParams instance
before passing it as a parameter to the
com.rsa.ssl.SSLSocket or
com.rsa.ssl.SSLServerSocket constructor.
For example:
SSLParams params = new SSLParams();
// Set the enabled cipher suites.
CipherSuite[] cipherSuites = {
ECDHE_RSA_With_RC4_128_SHA.INSTANCE,
ECDHE_ECDSA_With_RC4_128_SHA.INSTANCE
};
params.setCipherSuites(cipherSuites);
loadTrustAnchors(params);
// Create an SSLSocket and connect it to the server.
SSLSocket socket = new SSLSocket(HOSTNAME, PORT, params);
// Use the Socket.
InputStream in = socket.getInputStream();
OutputStream out = socket.getOutputStream();
For more information, see the following SSLJ cipher suite and TLS protocol server
samples:
• sslj/client/CipherSuiteAndProtocol.java
• sslj/server/CipherSuiteAndProtocol.java
To view these samples in the RSA BSAFE SSL-J Developers Guide, go to
Welcome to the SSL-J Toolkit > SSLJ Samples > Client Server Configuration and
select the required sample.