org.eclipse.jetty.util.ssl

Class ExtendedSslContextFactory

java.lang.Object

org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.util.ssl.SslContextFactory

org.eclipse.jetty.util.ssl.ExtendedSslContextFactory

All Implemented Interfaces:

LifeCycle

public class ExtendedSslContextFactory
extends SslContextFactory

The Extended SSL ContextFactory supports additional SslContext features that are only available in Java-8, specifically:

• setUseCipherSuitesOrder(boolean)
• SNI - Server Name Indicator

If the KeyStore contains multiple X509 certificates, then the CN element of the distinguished name is used to select the certificate alias to use for a connection. Simple wildcard names (eg *.domain.com) are supported.

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.util.ssl.SslContextFactory

SslContextFactory.Factory

Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

AbstractLifeCycle.AbstractLifeCycleListener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle

LifeCycle.Listener

Field Summary

Fields inherited from class org.eclipse.jetty.util.ssl.SslContextFactory

_factory, DEFAULT_KEYMANAGERFACTORY_ALGORITHM, DEFAULT_TRUSTMANAGERFACTORY_ALGORITHM, KEYPASSWORD_PROPERTY, PASSWORD_PROPERTY, TRUST_ALL_CERTS

Fields inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

FAILED, RUNNING, STARTED, STARTING, STOPPED, STOPPING

Constructor Summary

Constructors

Constructor and Description
ExtendedSslContextFactory()

Method Summary

Modifier and Type	Method and Description
void	customize(SSLEngine sslEngine)
protected void	doStart() Create the SSLContext object and start the lifecycle
protected void	doStop()
protected KeyManager[]	getKeyManagers(KeyStore keyStore)
boolean	isUseCipherSuitesOrder()
void	setUseCipherSuitesOrder(boolean useCipherSuitesOrder)

Methods inherited from class org.eclipse.jetty.util.ssl.SslContextFactory

addExcludeCipherSuites, addExcludeProtocols, checkIsRunning, checkIsStarted, checkNotStarted, deduceKeyLength, getCertAlias, getCertChain, getCrlPath, getExcludeCipherSuites, getExcludeProtocols, getIncludeCipherSuites, getIncludeProtocols, getKeyStore, getKeyStorePath, getKeyStoreProvider, getKeyStoreResource, getKeyStoreType, getMaxCertPathLength, getNeedClientAuth, getOcspResponderURL, getProtocol, getProvider, getSecureRandomAlgorithm, getSslContext, getSslKeyManagerFactoryAlgorithm, getSslSessionCacheSize, getSslSessionTimeout, getTrustManagerFactoryAlgorithm, getTrustManagers, getTrustStore, getTrustStoreProvider, getTrustStoreResource, getTrustStoreType, getWantClientAuth, isEnableCRLDP, isEnableOCSP, isRenegotiationAllowed, isSessionCachingEnabled, isTrustAll, isValidateCerts, isValidatePeerCerts, loadCRL, loadKeyStore, loadTrustStore, newSSLEngine, newSSLEngine, newSSLEngine, newSslServerSocket, newSslSocket, selectCipherSuites, selectProtocols, setCertAlias, setCrlPath, setEnableCRLDP, setEnableOCSP, setEndpointIdentificationAlgorithm, setExcludeCipherSuites, setExcludeProtocols, setIncludeCipherSuites, setIncludeProtocols, setKeyManagerPassword, setKeyStore, setKeyStorePassword, setKeyStorePath, setKeyStoreProvider, setKeyStoreResource, setKeyStoreType, setMaxCertPathLength, setNeedClientAuth, setOcspResponderURL, setProtocol, setProvider, setRenegotiationAllowed, setSecureRandomAlgorithm, setSessionCachingEnabled, setSslContext, setSslKeyManagerFactoryAlgorithm, setSslSessionCacheSize, setSslSessionTimeout, setTrustAll, setTrustManagerFactoryAlgorithm, setTrustStore, setTrustStorePassword, setTrustStorePath, setTrustStoreProvider, setTrustStoreResource, setTrustStoreType, setValidateCerts, setValidatePeerCerts, setWantClientAuth, toString

Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, setStopTimeout, start, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

ExtendedSslContextFactory

public ExtendedSslContextFactory()

Method Detail

isUseCipherSuitesOrder

public boolean isUseCipherSuitesOrder()

setUseCipherSuitesOrder

public void setUseCipherSuitesOrder(boolean useCipherSuitesOrder)

doStart

protected void doStart()
                throws Exception

Create the SSLContext object and start the lifecycle

Overrides:

doStart in class SslContextFactory

Throws:

Exception

See Also:

AbstractLifeCycle.doStart()

doStop

protected void doStop()
               throws Exception

Overrides:

doStop in class SslContextFactory

Throws:

Exception

getKeyManagers

protected KeyManager[] getKeyManagers(KeyStore keyStore)
                               throws Exception

Overrides:

getKeyManagers in class SslContextFactory

Throws:

Exception

customize

public void customize(SSLEngine sslEngine)

Overrides:

customize in class SslContextFactory