Does BC actually provide cipher suites unavailable in Java 7?

Hi everyone. I haven't pestered this list with my questions for several years, but I'm in a bind again.

I am supporting a product that, for now, is absolutely restricted to Java 7. However, we have an application that connects to NetSuite, and about a week ago, NetSuite stopped allowing access to any of the ciphersuites we support out of the box.

The ones we need to support are:

  *   ECDHE-RSA-AES128-GCM-SHA256
  *   ECDHE-RSA-AES256-GCM-SHA384
  *   AES128-GCM-SHA256
  *   AES256-GCM-SHA384
None of which are available in Java 7.

I copied the latest BCprov and BCtls jars into my jre/lib/ext, updated the java.security to list org.bouncycastle.jce.provider.BouncyCastleProvider and org.bouncycastle.jsse.provider.BouncyCastleJsseProvider as my first and second providers, and loaded the unlimited strength crypto policy jars. I then added the following arguments when I launch the application:
-Dhttps.protocols=TLSv1.2
-Dhttps.cipherSuites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

But I get an "unsupported cipher" exception.

So now I'm wondering if BC will actually provide ciphers it knows about if the underlying JRE doesn't support them. On the other hand, if it is possible, I would appreciate some advice.

Regards,
Mike

Michael 
DiBaggio
Cleo  |  
Sr Software Engineer II
Email: [email protected]
  |  
Web: www.cleo.com
Join us for Cleo Connect 2019, October 7-10 in Orlando!  Register today!