title: Java 6 ECDHE Cipher Suite Support
body: <p>The <a href="http://docs.oracle.com/javase/6/docs/technotes/guides/security/StandardNames.html#ciphersuites" rel="nofollow">Java Cryptography Architecture
  Standard Algorithm Name Documentation</a> page for Java 6 lists ECDHE cipher suites. Thus I would expect they are supported in Java 6. Yet neither OOTB Java 6 nor the addition of the JCE Unlimited Strength policy files is enabling them.</p>
  
  <p>The book <a href="https://www.feistyduck.com/books/bulletproof-ssl-and-tls/" rel="nofollow">Bulletproof SSL and TLS</a> also indicates Java 6 supports ECDHE, with a caveat:</p>
  
  <blockquote>
    <p>Enable and prioritize ECDHE suites on the server. Java 6 and 7
    clients support these, and will happily use them. (But do note that
    with Java 6 you must switch to using the v3 handshake in order to
    utilize ECDHE suites at the client level.)</p>
  </blockquote>
  
  <p>I'm assuming by v3 handshake he means SSLv3? I haven't tried it but even if this works, SSLv3 is not a viable option due to the POODLE vulnerability.</p>
  
  <p>What am I missing?</p>