SSL Cipher Suites
- Last Updated: May 12, 2026
- 2 minute read
- OpenAccess SDK
- Version 8.1
- Documentation
The encryption cipher suite defines the type of encryption that is used for any data exchanged through an SSL connection. It is negotiated during the SSL handshake.
Note: TLS version 1.3 is supported only in JDK 11 and later versions and JDK 8u261 and later versions. In addition, TLS version 1.3 does not support anonymous cipher suites. The cipher suites supported by TLS version 1.3 and those supported by other protocol versions are mutually exclusive.
The following table shows the TLS1 encryption cipher suite used when the OpenAccess JDBC Client negotiates encryption with a server certificate.
JDBC Client: TLS1 SSL Encryption Cipher Suites with Certificate
| SSL_RSA_EXPORT_WITH_RC4_40_MD5 | SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA |
| SSL_RSA_WITH_RC4_128_MD5 | SSL_DHE_RSA_WITH_DES_CBC_SHA |
| SSL_RSA_WITH_RC4_128_SHA | SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA |
| SSL_RSA_EXPORT_WITH_DES40_CBC_SHA | TLS_RSA_WITH_AES_128_CBC_SHA |
| SSL_RSA_WITH_DES_CBC_SHA | TLS_DHE_RSA_WITH_AES_128_CBC_SHA |
| SSL_RSA_WITH_3DES_EDE_CBC_SHA |
The following table shows the encryption cipher suite used when the OpenAccess JDBC Client negotiates TLS1 without a server certificate.
JDBC Client: TLS1 SSL Encryption Cipher Suites without Certificate
| TLS_DH_anon_WITH_AES_128_CBC_SHA | SSL_DH_anon_WITH_DES_CBC_SHA |
| SSL_DH_anon_EXPORT_WITH_RC4_40_MD5 | SSL_DH_anon_WITH_3DES_EDE_CBC_SHA |
| SSL_DH_anon_WITH_RC4_128_MD5 | SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA |
The following table shows the TLS1.2 encryption cipher suite used when the OpenAccess JDBC Client negotiates encryption with a server certificate.
JDBC Client: TLS1.2 SSL Encryption Cipher Suites with Certificate
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 | TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 |
| TLS_RSA_WITH_AES_128_GCM_SHA256 | TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 |
| TLS_RSA_WITH_AES_256_GCM_SHA384 | TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 |
| TLS_RSA_WITH_AES_128_CBC_SHA256 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
| TLS_RSA_WITH_AES_256_CBC_SHA256 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 | TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 |
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
The following table shows the encryption cipher suite used when the OpenAccess JDBC Client uses TLS1.3.
Note: TLS version 1.3 is supported only in JDK 11 and later versions and JDK 8u261 and later versions. In addition, TLS version 1.3 does not support anonymous cipher suites. The cipher suites supported by TLS version 1.3 and those supported by other protocol versions are mutually exclusive.
JDBC Client: TLS1.3 SSL Encryption Cipher Suites with Certificate
| TLS_AES_256_GCM_SHA384 | TLS_AES_128_GCM_SHA256 |