--- java/org/apache/tomcat/websocket/Constants.java (revision 1779233) +++ java/org/apache/tomcat/websocket/Constants.java (working copy) @@ -53,6 +53,13 @@ */ public static final String SSL_PROTOCOLS_PROPERTY = "org.apache.tomcat.websocket.SSL_PROTOCOLS"; + /** + * Property name to set to configure the value that is passed to + * {@link javax.net.ssl.SSLEngine#setEnabledCipherSuites(String[])}. The + * value should be a comma separated string. + */ + public static final String SSL_CIPHER_SUITES_PROPERTY = + "org.apache.tomcat.websocket.SSL_CIPHER_SUITES"; public static final String SSL_TRUSTSTORE_PROPERTY = "org.apache.tomcat.websocket.SSL_TRUSTSTORE"; public static final String SSL_TRUSTSTORE_PWD_PROPERTY = --- java/org/apache/tomcat/websocket/WsWebSocketContainer.java (revision 1779233) +++ java/org/apache/tomcat/websocket/WsWebSocketContainer.java (working copy) @@ -803,6 +803,12 @@ engine.setEnabledProtocols(sslProtocolsValue.split(",")); } + String sslCipherSuitesValue = + (String) userProperties.get(Constants.SSL_CIPHER_SUITES_PROPERTY); + if (sslCipherSuitesValue != null) { + engine.setEnabledCipherSuites(sslCipherSuitesValue.split(",")); + } + engine.setUseClientMode(true); return engine; --- webapps/docs/web-socket-howto.xml (revision 1779233) +++ webapps/docs/web-socket-howto.xml (working copy) @@ -106,6 +106,7 @@