Package com.predic8.membrane.core.config.security

Class SSLParser

java.lang.Object
com.predic8.membrane.core.config.security.SSLParser
public class SSLParser extends Object
Description

Configures inbound or outbound SSL connections.

Topic
6. Security

  • Constructor Details

    • SSLParser

      public SSLParser()

  • Method Details

    • equals

      public boolean equals(Object obj)
      Overrides:
      equals in class Object

    • hashCode

      public int hashCode()
      Overrides:
      hashCode in class Object

    • getKeyStore

      public KeyStore getKeyStore()

    • setKeyStore

      public void setKeyStore(KeyStore keyStore)

    • getKey

      public Key getKey()

    • setKey

      public void setKey(Key key)
      Description
      Used to manually compose the keystore.

    • getKeyGenerator

      public KeyGenerator getKeyGenerator()

    • setKeyGenerator

      public void setKeyGenerator(KeyGenerator keyGenerator)
      Description
      Used to dynamically generate a key for the incoming connection on the fly.

    • getTrustStore

      public TrustStore getTrustStore()

    • setTrustStore

      public void setTrustStore(TrustStore trustStore)

    • getAlgorithm

      public String getAlgorithm()

    • setAlgorithm

      public void setAlgorithm(String algorithm)
      Default
      java default
      Description
      getDefaultAlgorithm()
      Example
      SunX509

    • getProtocol

      public String getProtocol()

    • setProtocol

      public void setProtocol(String protocol)
      Default
      TLS
      Description
      SSLContext.getInstance()

    • getProtocols

      public String getProtocols()

    • setProtocols

      public void setProtocols(String protocols)
      Default
      TLS*
      Description
      SSLSocket.setEnabledProtocols()

    • getCiphers

      public String getCiphers()

    • setCiphers

      public void setCiphers(String ciphers)
      Default
      all system default ciphers
      Description
      Space separated list of ciphers to allow. getSupportedCipherSuites()
      Example
      TLS_ECDH_anon_WITH_RC4_128_SHA

    • getClientAuth

      public String getClientAuth()

    • setClientAuth

      public void setClientAuth(String clientAuth)
      Default
      not set
      Description
      Either not set (=no), or want or need.
      Example
      need

    • isIgnoreTimestampCheckFailure

      public boolean isIgnoreTimestampCheckFailure()

    • setIgnoreTimestampCheckFailure

      public void setIgnoreTimestampCheckFailure(boolean ignoreTimestampCheckFailure)

    • getTrust

      public Trust getTrust()

    • setTrust

      public void setTrust(Trust trust)
      Description
      Used to manually compose the truststore.

    • getEndpointIdentificationAlgorithm

      public String getEndpointIdentificationAlgorithm()

    • setEndpointIdentificationAlgorithm

      public void setEndpointIdentificationAlgorithm(String endpointIdentificationAlgorithm)
      Default
      HTTPS
      Description
      See setEndpointIdentificationAlgorithm().

    • getServerName

      public String getServerName()

    • setServerName

      public void setServerName(String serverName)
      Default
      same as target hostname.
      Description
      Setting the serverName tells Java to use the SNI (...) on outbound TLS connections to indicate to the TLS server, which hostname the client wants to connect to.

    • isShowSSLExceptions

      public boolean isShowSSLExceptions()

    • setShowSSLExceptions

      public void setShowSSLExceptions(boolean showSSLExceptions)
      Default
      true
      Description
      Tells Membrane to show SSL exceptions in its log

    • isUseAsDefault

      public boolean isUseAsDefault()

    • setUseAsDefault

      public void setUseAsDefault(boolean useAsDefault)
      Default
      true
      Description
      whether to use the SSLContext built from this SSLParser when no SNI header was transmitted.

    • isUseExperimentalHttp2

      public boolean isUseExperimentalHttp2()

    • setUseExperimentalHttp2

      public void setUseExperimentalHttp2(boolean useHttp2)
      Default
      false
      Description
      whether to enable receiving HTTP/2 requests. (experimental)

    • getAcme

      public Acme getAcme()

    • setAcme

      public void setAcme(Acme acme)