The JSSE configuration mechanisms are lacking:

 . the Sun JSSE provider has a default SSL context, but it is only indirectly via the SSL socket factories. This means that it is not possible to create SSLEngines using the default context, determine the Provider of the default context, etc.

 . the default SSL context can only be configured via system properties, which is inherently inflexible

 . the individual SSL connection parameters must be set and retrieved by calling multiple methods, which makes it more complicated to pass them between different components.