Order of ciphers is no longer preserved

Benny Prange <[email protected]> Fri, 20 Feb 2026 15:48:25 +0100

Newsgroups	gmane.comp.jakarta.tomcat.user
Message-ID	<CAOcX=p3mwnzRgDJEE4E-=BCr_OFJ_axw16A-ATDe-RUX5kviqw@mail.gmail.com>

Greetings,

I noticed in Tomcat 11.0.18 that the order of ciphers passed to
SSLHostconfig#setCiphers is no longer preserved. I'm pretty sure that this
was introduced with 11.0.16, where the code in
SSLHostConfig#getJsseCipherNames was modified to handle TLS1.2 and 1.3
ciphers. The ciphers of both lists are added to a HashSet, which does not
preserve the order.

Best regards,
Benny