I want to know if JDK 1.8 supports a DH key length of 4096 bits.
jdk.tls.ephemeralDHKeySize I searched, I found that jdk.tls.ephemeralDHKeySize can only accept from 1024 to 2048 bits.
I need to connect to a site that supports
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e) DH 4096 bits (p: 512, g: 1, Ys: 512)."
But I get
"Failed to create DH keypair" Exception.
EDIT:
Adding more information,
I am using Apache httpclient-4.2.5 to connect to the site. Server also supports
"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f) - 4096 bits."
When I use JDK 1.8 and try to connect a cipher suite, it is selected by the server, but JDK 1.8 only supports 2048 bits, and my connection does not work.
EDIT:
Bouncy castle can be used as a workaround to support 4096 bits. http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6521495
Utra
source share