Allow setting server SSL cipher order.

[josephverburg]

Problem or use case

From a security perpective it is better to use the cipher order from the server instead of the client, so that you can order the supported ciphers from most secure to least secure.
Currently this is not possible with HiveMQ.

Preferred solution or suggestions

This can be achieved by adding the following lines to https://github.com/hivemq/hivemq-community-edition/blob/master/src/main/java/com/hivemq/security/ssl/SslFactory.java#L81:
SSLParameters params = sslEngine.getSSLParameters(); params.setUseCipherSuitesOrder(true); sslEngine.setSSLParameters(params);

This can be hidden behind a config option to make it flexible.

[MicWalter]

Hi @josephverburg,

good idea 👍, I'll bring this up within the team and will keep you updated when I have new information.

Greetings,
Michael from the HiveMQ team

[MicWalter]

Hi @josephverburg,

it was discussed and I created a feature request on our board.
As when this issue will be tackled I can't say, but I keep you updated.

Greetings,
Michael

[MicWalter]

@josephverburg Ping to let you know this is done