From a4e5122d64c0d09ffc0ea228695e27f1d46ff3b4 Mon Sep 17 00:00:00 2001
From: Jamil Nimeh <jnimeh@openjdk.org>
Date: Tue, 22 Nov 2016 20:54:32 -0800
Subject: [PATCH] 8170035: When determining the ciphersuite lists, there is no
 debug output for disabled suites

Provide extra debugging output for JSSE that displays disabled cipher suites

Reviewed-by: vinnie, wetmore
---
 .../share/classes/sun/security/ssl/SSLContextImpl.java     | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java b/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
index 86727b91997..24dd7e0df14 100644
--- a/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
+++ b/jdk/src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java
@@ -403,6 +403,13 @@ public abstract class SSLContextImpl extends SSLContextSpi {
                             EnumSet.of(CryptoPrimitive.KEY_AGREEMENT),
                             suite.name, null)) {
                         suites.add(suite);
+                    } else {
+                        if (debug != null && Debug.isOn("sslctx") &&
+                                Debug.isOn("verbose")) {
+                            System.out.println(
+                                    "Ignoring disabled cipher suite: " +
+                                            suite.name);
+                        }
                     }
                 } else if (debug != null &&
                         Debug.isOn("sslctx") && Debug.isOn("verbose")) {