title: Java cipher suites
body: <p>I'm trying to work out the order that cipher suites are returned using SSLSocketFactory.getSupportedCipherSuites() - it seems to differ between Java 1.6 &amp; Java 1.7.</p>
  
  <p>I thought this would be easy to determine but have run into a few problems.  First, though, here is the code I'm using:</p>
  
  <pre><code>SSLContext context = SSLContext.getDefault();
  SSLSocketFactory sf = context.getSocketFactory();
  String[] cipherSuites = sf.getSupportedCipherSuites();
  </code></pre>
  
  <p>Pretty straight forward (do correct me if I've done something stupid).
  So, I thought (using eclipse) that I'd be able to step into the getSupportedCipherSuites() method, but it seems the source code isn't there to do that (is there a reason for that?).  I found the class in jsse.jar and decompiled it using <a href="http://java.decompiler.free.fr/?q=jdeclipse%20JD-Eclipse" rel="nofollow noreferrer">JD-Eclipse</a>.
  This however gives me an abstract class and I've not been able to see the concrete implementation of the abstract class (I've discovered that the class can be set using a property "ssl.SocketFactory.provider" but this hasn't been specified in java.security). 
  I've also not been able to determine how to turn logging on using the "javax.net.debug" property (this disappears into a native method).</p>
  
  <p>Could someone point out where I'm going wrong?</p>