-Djdk.nativeCBC

This option enables or disables OpenSSL native cryptographic support for the CBC algorithm.

Syntax

    -Djdk.nativeCBC=[true|false]
Setting value Default
-Djdk.nativeCBC true yes
-Djdk.nativeCBC false

Explanation

OpenSSL support is enabled by default for the CBC, Digest, GCM, and RSA algorithm. If you want to turn off the CBC algorithm, set this option to false.

Restriction: Start of content that applies to Java 8 (LTS) Start of content that applies to Java 11 (LTS) Due to issue #5611, the Digest algorithm is currently disabled. End of content that applies only to Java 8 and 11 (LTS)

To turn off all the algorithms, see the -Djdk.nativeCrypto system property command line option.