Package com.predic8.membrane.core.transport.ssl

Class AcmeSSLContext

java.lang.Object

com.predic8.membrane.core.transport.ssl.SSLContext

com.predic8.membrane.core.transport.ssl.AcmeSSLContext

All Implemented Interfaces:

SSLProvider

public class AcmeSSLContext
extends SSLContext

Field Summary

Fields

Modifier and Type	Field	Description
static final int	TLS_CERTIFICATE_UNKNOWN

Fields inherited from class com.predic8.membrane.core.transport.ssl.SSLContext

ciphers, endpointIdentificationAlgorithm, getApplicationProtocols, needClientAuth, protocols, setApplicationProtocols, wantClientAuth

Constructor Summary

Constructors

Constructor	Description
AcmeSSLContext(SSLParser parser, String[] hosts, HttpClientFactory httpClientFactory, TimerManager timerManager)

Method Summary

Modifier and Type	Method	Description
ServerSocket	createServerSocket(int port, int backlog, InetAddress bindAddress)
Socket	createSocket()
Socket	createSocket(String host, int port, int connectTimeout, String sniServerName, String[] applicationProtocols)
Socket	createSocket(String host, int port, InetAddress addr, int localPort, int connectTimeout, String sniServerName, String[] applicationProtocols)
Socket	createSocket(Socket s, String host, int port, int connectTimeout, String sniServerName, String[] applicationProtocols)
AcmeClient	getClient()
String[]	getHosts()
String	getPrometheusContextTypeName()
long	getValidFrom()
long	getValidUntil()
boolean	hasKeyAndCertificate()
void	init(KubernetesClientFactory kubernetesClientFactory, HttpClientFactory httpClientFactory)
boolean	isReady()
static long	renewAt(long validFrom, long validUntil)
void	schedule()
void	stop()	Advises the SSL Provider to stop providing its services.
Socket	wrap(Socket socket, byte[] buffer, int position)
Socket	wrapAcceptedSocket(Socket socket)

Methods inherited from class com.predic8.membrane.core.transport.ssl.SSLContext

applyCipherOrdering, applyCiphers, checkChainValidity, checkKeyMatchesCert, constructHostNamePattern, getApplicationProtocols, getMinimumValidity, getValidFrom, init, isUseAsDefault, showSSLExceptions

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

TLS_CERTIFICATE_UNKNOWN

public static final int TLS_CERTIFICATE_UNKNOWN

See Also:

• Constant Field Values

Constructor Details

AcmeSSLContext

public AcmeSSLContext(SSLParser parser,
 String[] hosts,
 @Nullable
 HttpClientFactory httpClientFactory,
 @Nullable
 TimerManager timerManager)

Method Details

init

public void init(@Nullable
 KubernetesClientFactory kubernetesClientFactory,
 @Nullable
 HttpClientFactory httpClientFactory)

getClient

public AcmeClient getClient()

getHosts

public String[] getHosts()

createServerSocket

public ServerSocket createServerSocket(int port,
 int backlog,
 InetAddress bindAddress)
                                throws IOException

Throws:

IOException

createSocket

public Socket createSocket()
                    throws IOException

Throws:

IOException

createSocket

public Socket createSocket(Socket s,
 String host,
 int port,
 int connectTimeout,
 @Nullable
 String sniServerName,
 @Nullable
 String[] applicationProtocols)
                    throws IOException

host - relevant to verify the server cert only

port - relevant to verify the server cert only

Throws:

IOException

createSocket

public Socket createSocket(String host,
 int port,
 int connectTimeout,
 @Nullable
 String sniServerName,
 @Nullable
 String[] applicationProtocols)
                    throws IOException

Throws:

IOException

createSocket

public Socket createSocket(String host,
 int port,
 InetAddress addr,
 int localPort,
 int connectTimeout,
 @Nullable
 String sniServerName,
 @Nullable
 String[] applicationProtocols)
                    throws IOException

Throws:

IOException

wrapAcceptedSocket

public Socket wrapAcceptedSocket(Socket socket)
                          throws IOException

Throws:

IOException

wrap

public Socket wrap(Socket socket,
 byte[] buffer,
 int position)
            throws IOException

Overrides:

wrap in class SSLContext

Throws:

IOException

schedule

public void schedule()

renewAt

public static long renewAt(long validFrom,
 long validUntil)

stop

public void stop()

Description copied from interface: SSLProvider

Advises the SSL Provider to stop providing its services. (For most providers this will be a no-op.)

No guarantee that this is only called once.

Specified by:

stop in interface SSLProvider

Overrides:

stop in class SSLContext

isReady

public boolean isReady()

hasKeyAndCertificate

public boolean hasKeyAndCertificate()

Specified by:

hasKeyAndCertificate in class SSLContext

Returns:

whether this context has a working certificate and key

getValidFrom

public long getValidFrom()

Specified by:

getValidFrom in class SSLContext

getValidUntil

public long getValidUntil()

Specified by:

getValidUntil in class SSLContext

getPrometheusContextTypeName

public String getPrometheusContextTypeName()

Specified by:

getPrometheusContextTypeName in class SSLContext