You can also use the -Djava.security.properties command line option to override the jdk.tls.disabledAlgorithms security property and re-enable RC4, ex:

  java -Djava.security.properties=my.java.security ...

where my.java.security is a file containing the property without RC4:

  jdk.tls.disabledAlgorithms=SSLv3
                                     

Suggested release note:

RC4-based TLS ciphersuites (e.g. TLS_RSA_WITH_RC4_128_SHA) are now considered compromised and should no longer be used (see RFC 7465). Accordingly, RC4-based TLS ciphersuites have been deactivated by default in the Oracle JSSE implementation by adding "RC4" to "jdk.tls.disabledAlgorithms" security property, and by removing them from the default enabled ciphersuites list. These cipher suites can be reactivated by removing "RC4" form "jdk.tls.disabledAlgorithms" security property in the java.security file or by dynamically calling Security.setProperty(), and also readding them to the enabled ciphersuite list using the SSLSocket/SSLEngine.setEnabledCipherSuites() methods.

                                     

release-note=yes:

Better to talk about how to re-enable RC4 cipher suites if necessary.  The description depends on whether JDK-8043202 is released in the same time or not.  Please contact me for the release-note review.
                                     

Code review: http://mail.openjdk.java.net/pipermail/security-dev/2015-April/011991.html