Skip to content

-Djdk.nativeXDHKeyGen

Start of content that applies to Java 11 (LTS) and later This option enables or disables OpenSSL native cryptographic support for the XDH key generation algorithm.

Restrictions:

  • This algorithm is supported on Java™ 11 and later.
  • This algorithm is supported on OpenSSL 1.1.1 onwards.

Syntax

    -Djdk.nativeXDHKeyGen=[true|false]
Setting value Default
-Djdk.nativeXDHKeyGen true yes
-Djdk.nativeXDHKeyGen false

Explanation

OpenSSL support is enabled by default for the XDH key generation algorithm. If you want to turn off support for this algorithm only, set this option to false. To turn off support for this and other algorithms, see the -Djdk.nativeCrypto system property command line option.

Note: The XDH key generation algorithm is not supported for OpenSSL on AIX®. This option is ignored on AIX and the Java implementation is always used.