-Djdk.nativeCrypto
This option controls the use of OpenSSL native cryptographic support.
Syntax
-Djdk.nativeCrypto=[true|false]
Setting | value | Default |
---|---|---|
-Djdk.nativeCrypto |
true | yes |
-Djdk.nativeCrypto |
false |
Explanation
OpenSSL support is enabled by default for the Digest, CBC, GCM, RSA, ChaCha20 and ChaCha20-Poly1305, ECDH key agreement, EC key generation, XDH key agreement, and XDH key generation algorithms. If you want to turn off the OpenSSL implementation, set this option to false
.
Restriction: The ChaCha20 and ChaCha20-Poly1305 algorithms are not supported on Java™ 8. The XDH key agreement and XDH key generation algorithms also are not supported on Java 8.
If you want to turn off the algorithms individually, use the following system properties: