Does OUD care about TLS cipher ordering?

Hi,

an auditor is asking me whether it's able to force an order of cipher preference server-side in OUD.

The intention is obviously to force the selection of strong ciphers even where clients are misconfigured.

So, I'm looking at the OUD configuration, but where tools.properties has a concatenated string of ciphers (in a certain order) connection handlers in cn=config have a multivalued attribute on the server side (which doesn't have any internal order.) So, that kinda seems to suggest we have the old model here, where the order of preference is determined by the client.

Java itself can make the server chose by its own preference.