-Djdk.nativeCrypto

This option controls the use of OpenSSL native cryptographic support.

Syntax

    -Djdk.nativeCrypto=[true|false]
Setting value Default
-Djdk.nativeCrypto true yes
-Djdk.nativeCrypto false

Explanation

OpenSSL support is enabled by default for the Digest, CBC, GCM, RSA, and ChaCha20 and ChaCha20-Poly1305 algorithms. If you want to turn off the OpenSSL implementation, set this option to false.

Restrictions:

  • Start of content that applies to Java 8 (LTS) and later Due to issue #5611, the Digest algorithm is currently disabled. End of content that applies to Java 8 and later)
  • Start of content that applies to Java 8 (LTS) Start of content that applies to Java 12 (LTS) The ChaCha20 and ChaCha20-Poly1305 algorithms are not supported on Java 8 or 12. End of content that applies only to Java 8 and 12 (LTS)

If you want to turn off the algorithms individually, use the following system properties: