From b261ec4c6a0fe8830ee388832b61db14c863b4ba Mon Sep 17 00:00:00 2001
From: jnimeh <unknown>
Date: Tue, 22 Nov 2016 20:54:32 -0800
Subject: [PATCH] 8170035: When determining the ciphersuite lists, there is no
 debug output for disabled suites. Summary: Provide extra debugging output for
 JSSE that displays disabled cipher suites Reviewed-by: vinnie, wetmore

---
 src/share/classes/sun/security/ssl/SSLContextImpl.java | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/share/classes/sun/security/ssl/SSLContextImpl.java b/src/share/classes/sun/security/ssl/SSLContextImpl.java
index 60aa908bf..2107add74 100644
--- a/src/share/classes/sun/security/ssl/SSLContextImpl.java
+++ b/src/share/classes/sun/security/ssl/SSLContextImpl.java
@@ -308,6 +308,13 @@ public abstract class SSLContextImpl extends SSLContextSpi {
                             EnumSet.of(CryptoPrimitive.KEY_AGREEMENT),
                             suite.name, null)) {
                         suites.add(suite);
+                    } else {
+                        if (debug != null && Debug.isOn("sslctx") &&
+                                Debug.isOn("verbose")) {
+                            System.out.println(
+                                    "Ignoring disabled cipher suite: " +
+                                            suite.name);
+                        }
                     }
                 } else if (debug != null &&
                         Debug.isOn("sslctx") && Debug.isOn("verbose")) {
-- 
GitLab