[jetty-users] SSL breakage in 9.3.7.v20160115?

[David Kellum <dek94@xxxxxxxxxxxxx>]

My integration tests started failing when I upgraded to 9.3.7.v20160115 from 9.3.6.  SSL connections are failing. Turning debug logging on, the cause appears to be this:

javax.net.ssl.SSLHandshakeException: no cipher suites in common

My testing is using pretty generic (ruby) SSL access, default client settings.

Now some conjecture—looking through the available release notes:

https://github.com/eclipse/jetty.project/blob/jetty-9.3.x/VERSION.txt

485714 Update SSL configuration to mitigate SLOTH vulnerability

But the bugzilla issue sounds incomplete:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=485714#c2

…and despite the claim that the change was reverted, this at least made it into the release:

https://github.com/eclipse/jetty.project/commit/0a1b0b2bc69ea7e7f5f44992f47a84f926cdeebb

Please advise? Thanks.

—David