Archived Content: This information is no longer maintained and is provided "as is" for your convenience.
Summary
Question
Service Manager uses the default SunJSSE implementation for SSL communication.
The available cipher suites are:
SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA.
**J2SE 5 does support AES256 but it requires installation of the JCE Unlimited Strength Jurisdiction Policy Files.
Without the installation of “JCE Unlimited Strength Jurisdiction Policy Files” the TLS_DHE_DSS_WITH_AES_128_CBC_SHA is the selected cipher.
Beginning with Service Manager 9.31P2 the JRE used is 1.7 so the following information is valid (http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html).
Service Manager does NOT support certificates with SHA-2 fingerprint - this is a JRE limitation.