title: Chrome/Firefox and Jetty HTTPS
body: <p>I have an application running on Jetty 6 which is accessed over HTTPS. Connecting with IE 11 works but not Firefox 43 or Google 40.
  The SSL trace shows that Jetty and browser fail to find a common cipher:</p>
  
  <pre><code>   %% Initialized:  [Session-13, SSL_NULL_WITH_NULL_NULL]
     %% Invalidated:  [Session-13, SSL_NULL_WITH_NULL_NULL]
     783842035@qtp-1833323686-4, SEND TLSv1.2 ALERT:  fatal, description = handshake_failure
     783842035@qtp-1833323686-4, WRITE: TLSv1.2 Alert, length = 2
     [Raw write]: length = 7
     0000: 15 03 03 00 02 02 28                               ......(
     783842035@qtp-1833323686-4, called closeSocket()
     783842035@qtp-1833323686-4, handling exception: javax.net.ssl.SSLHandshakeException: no cipher suites in common
  </code></pre>
  
  <p>However, when IE 11 is used the selected cipher is <code>TLS_DHE_DSS_WITH_AES_128_CBC_SHA256</code>:</p>
  
  <pre><code>    %% Initialized:  [Session-30, SSL_NULL_WITH_NULL_NULL]
      %% Negotiating:  [Session-30, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256]
      *** ServerHello, TLSv1.2
  </code></pre>
  
  <p>Since Chrome warns about RC4 ciphers when it fails to connect:</p>
  
  <blockquote>
    <blockquote>
      <p>A secure connection cannot be established because this site uses an >>unsupported protocol or cipher suite. This is likely to be caused when the >>server needs RC4, which is no longer considered secure.</p>
    </blockquote>
  </blockquote>
  
  <p>I have excluded RC4 in java.security by adding the following property</p>
  
  <pre><code>    jdk.tls.disabledAlgorithms=RC4
  </code></pre>
  
  <p>but to no avail, Chrome and FF still fail to connect.
  I've ran out of ideas. Any suggestions? TIA.</p>