Option to set TLS protocol version and cipher suites

Is there a way we can set TLS protocol and CipherSuites while creating server. We have a requirement to use TLSv1.2 version and remove cipher suites with 128 keys.

Or Is there a way we can pass SSLEngine with all the required options while creating the server?

[rossabaker]

So to be specific, what’s missing are:

setEnabledCipherSuites(String[] suites)
setEnabledProtocols(String[] protocols)

We have a solution for:

setNeedClientAuth(boolean need)
setWantClientAuth(boolean want)

I don’t think anyone would want to customize:

setEnableSessionCreation(boolean flag)

And nobody should be using:

setUseClientMode(boolean mode)

An SSLContext => F[Unit] would be most flexible, but I think too flexible. I guess the title says it all: we need to add support for protocol version and cipher suites.

[RafalSumislawski]

I think you can do what you need by providing a custom SSLContext (it is responsible for creating SSLEngine) . See BlazeServerBuilder#withSSLContext.