Overwriting jetty default ciphers
<p>My initial problem was that when I was using IncludeCipherSuites option in jetty configuration file, only TLS 1.2 was being supported. Please see below post for details:
<a href="https://stackoverflow.com/questions/39540529/jetty-includeciphersuites-enables-only-tls-1-2">Jetty IncludeCipherSuites enables only TLS 1.2</a></p>

<p>Based on the comments it appeared that if I don't provide ExcludeCipherSuites in my jetty configuration file, jetty default exclude cipher list is being used and many ciphers which I explicitly enabled by IncludeCipherSuites option were being excluded (if they are in jetty default exclude list). </p>

<p>Just adding an empty ExcludeCiphersSuites tag together with IncludeCipherSuites tag in the same configuration file solved the problem. By saying empty I mean I didn't add any ciphers to exclude, I just added ExcludeCiphersSuites tag with empty list of ciphers:</p>

<pre class="lang-xml prettyprint-override"><code>&lt;Set name="ExcludeCipherSuites"&gt;
    &lt;Array type="String"&gt;
    &lt;/Array&gt;
&lt;/Set&gt;
</code></pre>

<p>My understanding is that previously (with only IncludeCipherSuites option) some of the the ciphers which I was including was being excluded by jetty default exclude list. However adding ExcludeCiphersSuites option with empty list forces to overwrite jetty's default exclude list with an empty list, so nothing is being excluded from my list of include ciphers. Can you please confirm that my understanding is correct?</p>

<p>Also based on all the above findings say jetty has the below default configuration for ciphers:</p>

<pre><code>Jetty default exclude ciphers: CIPHER1, CIPHER2
Jetty default include ciphers: CIPHER3, CIPHER4
</code></pre>

<p>I want to configure my jetty to support CIPHER1 and CIPHER5 ONLY. Is the below the correct configuration I should use?</p>

<pre class="lang-xml prettyprint-override"><code>&lt;Set name="ExcludeCipherSuites"&gt;
    &lt;Array type="String"&gt;
    &lt;/Array&gt;
&lt;/Set&gt;

&lt;Set name="IncludeCipherSuites"&gt;
    &lt;Array type="String"&gt;
         &lt;Item&gt;CIPHER1&lt;/Item&gt;
         &lt;Item&gt;CIPHER2&lt;/Item&gt;
    &lt;/Array&gt;
&lt;/Set&gt;
</code></pre>

<p>Will this overwrite all jetty defaults and force jetty to support CIPHER1 and CIPHER2 and nothing else?</p>