dropwizard / dropwizard / 3861

86%

push

travis-ci

Add support for setting several cipher suites for HTTP/2 (#2119)

There are many SSL ciphers which are supported by HTTP/2 clients (see
https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility)
and the user should have the ability to use them in Dropwizard
applications. Currently it's not possible because Dropwizard forces
the default cipher `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256` defined
in the HTTP2 spec.

This change allows users to provide a custom list of supported ciphers,
so clients who support more strong ciphers, can use them. The provided
list of ciphers MUST contain the `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`
cipher as defined in the HTTP2 spec.

Redux of #1978.

6 of 6 new or added lines in 1 file covered. (100.0%)

6323 of 7423 relevant lines covered (85.18%)

78.09 hits per line