diff --git a/src/main/java/net/schmizz/sshj/DefaultConfig.java b/src/main/java/net/schmizz/sshj/DefaultConfig.java index 9b03346b..131158ad 100644 --- a/src/main/java/net/schmizz/sshj/DefaultConfig.java +++ b/src/main/java/net/schmizz/sshj/DefaultConfig.java @@ -134,6 +134,7 @@ public class DefaultConfig new TripleDESCBC.Factory(), new BlowfishCBC.Factory())); + boolean warn = false; // Ref. https://issues.apache.org/jira/browse/SSHD-24 // "AES256 and AES192 requires unlimited cryptography extension" for (Iterator> i = avail.iterator(); i.hasNext();) { @@ -144,10 +145,12 @@ public class DefaultConfig final byte[] iv = new byte[c.getIVSize()]; c.init(Cipher.Mode.Encrypt, key, iv); } catch (Exception e) { - log.warn("Disabling cipher `{}`: cipher strengths apparently limited by JCE policy", f.getName()); + warn = true; i.remove(); } } + if (warn) + log.warn("Disabling high-strength ciphers: cipher strengths apparently limited by JCE policy"); setCipherFactories(avail); }