@@ -54,8 +54,10 @@ public EncryptionOptions.ClientEncryptionOptions getEncryptionOptions()
5454 .withTrustStore (options .trustStore .value ())
5555 .withTrustStorePassword (options .trustStorePw .setByUser () ? options .trustStorePw .value () : credentials .transportTruststorePassword )
5656 .withAlgorithm (options .alg .value ())
57- .withProtocol (options .protocol .value ())
58- .withCipherSuites (options .ciphers .value ().split ("," ));
57+ .withProtocol (options .protocol .value ());
58+
59+ if (options .ciphers .value () != null )
60+ encOptionsBuilder .withCipherSuites (options .ciphers .value ().split ("," ));
5961
6062 if (options .keyStore .present ())
6163 {
@@ -88,8 +90,9 @@ static class TOptions extends GroupedOptions implements Serializable
8890 TRANSPORT_KEYSTORE_PASSWORD_PROPERTY_KEY ), false );
8991 final OptionSimple protocol = new OptionSimple ("ssl-protocol=" , ".*" , "TLS" , "SSL: connection protocol to use" , false );
9092 final OptionSimple alg = new OptionSimple ("ssl-alg=" , ".*" , null , "SSL: algorithm" , false );
93+ // Null is to auto-negotiate
9194 final OptionSimple ciphers = new OptionSimple ("ssl-ciphers=" , ".*" ,
92- "TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA" ,
95+ null ,
9396 "SSL: comma delimited list of encryption suites to use" , false );
9497
9598 @ Override
0 commit comments