title: Workaround for NoSuchAlgorithmException not working
body: <p>I'm getting  the following exception when I enable  SSL debug via <em>-Djavax.net.debug=ssl</em>:</p>
  
  <pre><code>java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available
  </code></pre>
  
  <p>I'm running Centos 6.7, Open JDK 1.8.0_91 &amp; Tomcat 7.0.63</p>
  
  <p>My research indicates that this is a known bug: <a href="https://bugs.centos.org/view.php?id=9482" rel="nofollow noreferrer">https://bugs.centos.org/view.php?id=9482</a></p>
  
  <p>I found numerous sources indicating that a workaround for this is to disable the Elliptic Curve cipher algorithms by setting the following property in the <em>jre/lib/security/java.security</em> file:</p>
  
  <pre><code>jdk.tls.disabledAlgorithms=EC,ECDHE,ECDH
  </code></pre>
  
  <p>I looked at my <em>java.security</em> file and found that these algorithms were already disabled:</p>
  
  <pre><code>jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keysize &lt; 768, EC, ECDHE, ECDH
  </code></pre>
  
  <p>I tried changing this property to be exactly as shown in the examples I found and that did not work either. I also tried removing the <em>jre/lib/ext/sunec.jar</em> file, which again had no effect.</p>
  
  <p>I've carefully traced my installation of Tomcat to ensure that the <em>jre/lib/security/java.security</em> file I'm modifying is the one Tomcat is running on.</p>
  
  <p>If anyone has any ideas about what is going on here or how I can work around this problem I would be very grateful to get your input.</p>
  
  <p>This question is related to <a href="https://stackoverflow.com/questions/28999410">OpenJDK on OpenShift: &quot;NoSuchAlgorithmException: EC AlgorithmParameters not available&quot;</a> except I'm not using OpenShift and I am able to edit my <em>java.security</em> file to attempt the <em>well known</em> workaround. My problem is that the workaround does not work for me.</p>