Skip to content

-Djdk.nativeXDHKeyAgreement

Start of content that applies to Java 11 (LTS) and later This option enables or disables OpenSSL native cryptographic support for the XDH key agreement algorithm.

Restrictions:

  • This algorithm is supported on Java™ 11 and later.
  • This algorithm is supported on OpenSSL 1.1.1 onwards.

Syntax

    -Djdk.nativeXDHKeyAgreement=[true|false]
Setting value Default
-Djdk.nativeXDHKeyAgreement true yes
-Djdk.nativeXDHKeyAgreement false

Explanation

OpenSSL support is enabled by default for the XDH key agreement algorithm. If you want to turn off support for this algorithm only, set this option to false. To turn off support for this and other algorithms, see the -Djdk.nativeCrypto system property command line option.

Note: The XDH key agreement algorithm is not supported for OpenSSL on AIX®. This option is ignored on AIX and the Java implementation is always used.