Project: mule
Issue MULE-7097: Provide a way to specify valid cipher specs for SSL on transports that support the protocol
SSL/TLS negotiate the actual cryptographic functions used on a session by session basis. In strict environments, it's necessary to remove older and weaker variants of many algorithms. It should be possible to setup the list of cipher specs allowed on secure connections. This setup should happen at server or at least application level, and the default should be to use whatever the cipher specs defined by default by the current provider. Note that this should affect not only https, but any other transport using tis, like pops, imaps, etc.
Story points: 8