Below is how to configure the set of SSL ciphers being used by Spring’s webclient.<\/p>\n\n\n\n
import io.netty.handler.ssl.SslContext;\nimport io.netty.handler.ssl.SslContextBuilder;\nimport org.springframework.beans.factory.annotation.Value;\nimport org.springframework.http.HttpHeaders;\nimport org.springframework.http.client.reactive.ReactorClientHttpConnector;\nimport org.springframework.stereotype.Service;\nimport org.springframework.web.reactive.function.client.WebClient;\nimport reactor.netty.http.client.HttpClient;\nimport javax.net.ssl.SSLException;\nimport java.util.Arrays;\n\n\nString[] CIPHERS_ALLOWED = {\"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384\",\n \"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384\",\n\"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384\"};\n\nSslContext context = SslContextBuilder\n .forClient<\/em>()\n .ciphers(Arrays.asList<\/em>(CIPHERS_ALLOWED))\n .build();\n\nHttpClient netty = HttpClient.create<\/em>()\n .wiretap(true) \/\/requested by the NSA\n .secure(sslContextSpec -> sslContextSpec.sslContext(context));\n\nthis.webclient = WebClient.builder<\/em>()\n .clientConnector(new ReactorClientHttpConnector(netty))\n .baseUrl(\"https:\/\/google.com\")\n .build();<\/pre>\n\n\n\nYou can see you create the HTTPClient from the netty static instance, then add the ssl context to it. Pass that netty instance to the webclient builder, and voila<\/em>, you can speak obscure, overly strong SSL. <\/p>\n\n\n\n<\/h2>\n","protected":false},"excerpt":{"rendered":"
Below is how to configure the set of SSL ciphers being used by Spring’s webclient. import io.netty.handler.ssl.SslContext; import io.netty.handler.ssl.SslContextBuilder; import org.springframework.beans.factory.annotation.Value; import org.springframework.http.HttpHeaders; import org.springframework.http.client.reactive.ReactorClientHttpConnector; import org.springframework.stereotype.Service; import org.springframework.web.reactive.function.client.WebClient; import reactor.netty.http.client.HttpClient; import javax.net.ssl.SSLException; import java.util.Arrays; String[] CIPHERS_ALLOWED = {“TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384”, “TLS_DHE_RSA_WITH_AES_256_GCM_SHA384”, “TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384”}; SslContext context = SslContextBuilder .forClient() .ciphers(Arrays.asList(CIPHERS_ALLOWED)) .build(); HttpClient netty = HttpClient.create() .wiretap(true) \/\/requested by the NSA .secure(sslContextSpec -> sslContextSpec.sslContext(context)); this.webclient = WebClient.builder() .clientConnector(new ReactorClientHttpConnector(netty)) .baseUrl(“https:\/\/google.com”) .build(); You can see you create the HTTPClient from the netty static instance, then…<\/p>\n