title: Restrict cipher suites on JRE level
body: <p>Our Java application exposes a lot of different interfaces (SMTP, FTP, HTTP), secured by SSL/TLS. The goal now is to limit cipher suites allowed on these interfaces to include only "strong" ones. I already have a list and it's clear how to make it working for a particular socket</p>
  
  <pre><code>socket.setEnabledCipherSuites(ENABLED_SECURE_CIPHER_SUITES);
  </code></pre>
  
  <p>or for Tomcat connector</p>
  
  <pre><code> &lt;Connector port="443" ciphers="..."/&gt;
  </code></pre>
  
  <p>The problem is that there are already 5 places in the application where I should apply this limitation manualy. Common SocketFactory does not seem to help, as it's not always feasible to supply custom SocketFactory to third-party API or framework. Is it possible to somehow introduce this limitation on JRE level, e.g. with JCE providers configuration or policy file?   </p>
  
  <p>JRE: Oracle JRE 1.7.0_17 </p>