Github user dain commented on a diff in the pull request: https://github.com/apache/zookeeper/pull/184#discussion_r195534358 --- Diff: src/java/main/org/apache/zookeeper/common/X509Util.java --- @@ -79,7 +91,7 @@ public X509Util() { String cipherSuitesInput = System.getProperty(cipherSuitesProperty); if (cipherSuitesInput == null) { - cipherSuites = null; + cipherSuites = getDefaultCipherSuites(); --- End diff -- I would say that if a user manually selected a cipher suite and it is not present on the JVM it should be an error. Otherwise they are not getting what they explicitly asked for. That said, I'm not sure you can check this explicitly (I don't know the apis that well either... especially when multiple providers are installed).
---