Hey everyone, I’m running a ktor server on Android. I’m using the Netty engine factory when starting the embeddedserver.
1. I’d like to configure the SSLContext a little bit, for example to filter out certain ciphers to be used etc. Is there a way to do this?
2. Is there a way to build OpenSSL myself and use that within ktor/netty, instead of relying on the default ssl provider?
a
Aleksei Tirman [JB]
08/02/2024, 9:03 AM
1. You can find information about configuring SSL on the server in the documentation.
2. As far as I can understand, OpenSSL is used by default, and it's dynamically linked by Netty. For more options, I recommend reading about netty-native.
p
Pim
08/02/2024, 9:25 AM
Thanks for your reply!
1. I have looked at the documentation and already set up SSL as described there. SSL works on the server. However there is not much about documentation about supported cipher suites etc. I have found something about CipherSuiteFilters, but I’m not sure how I can apply it…
2. When checking ‘SslContext.defaultServerProvider().name’ it reports it uses the JDK provider not the OpenSSL one. I’ll look into netty-native thanks!