How to set HTTPS SSL Cipher Suite Preference in Spring boot embedded tomcat

Question

I trying to set HTTPS SSL cipher suite preference according to server preference rather than auto select based on client & server supported common cipher suite with highest

Answer 1

You need to tell the connector's underlying protocol handler to use the server's cipher suite order. You can do so with a WebServerFactoryCustomizer :

@Bean
public WebServerFactoryCustomizer servletContainerCustomizer() {
    return (factory) -> {
        factory.addConnectorCustomizers((c) -> 
            ((AbstractHttp11Protocol) c.getProtocolHandler()).setUseServerCipherSuitesOrder(true));
    };
}