Skip to content

CAUTION: This site hosts draft documentation for the next release. For published content of the latest release, visit


This option enables or disables OpenSSL native cryptographic support for the CBC algorithm.


Setting value Default
-Djdk.nativeCBC true yes
-Djdk.nativeCBC false


OpenSSL support is enabled by default for the CBC algorithm. If you want to turn off this algorithm only, set this option to false. To turn off all the algorithms, see the -Djdk.nativeCrypto system property command line option.