Package com.yahoo.security.tls

Class ConfigFileBasedTlsContext

java.lang.Object

com.yahoo.security.tls.ConfigFileBasedTlsContext

All Implemented Interfaces:

TlsContext, AutoCloseable

public class ConfigFileBasedTlsContext
extends Object
implements TlsContext

A TlsContext that uses the tls configuration specified in the transport security options file. The credentials are regularly reloaded to support short-lived certificates.

Author:

bjorncs

Field Summary

Fields inherited from interface com.yahoo.security.tls.TlsContext

ALLOWED_CIPHER_SUITES, ALLOWED_PROTOCOLS, SSL_CONTEXT_VERSION

Constructor Summary

Constructors

Constructor	Description
ConfigFileBasedTlsContext(Path tlsOptionsConfigFile, AuthorizationMode mode)
ConfigFileBasedTlsContext(Path tlsOptionsConfigFile, AuthorizationMode mode, PeerAuthentication peerAuthentication)	Allows the caller to override the default peer authentication mode.

Method Summary

Modifier and Type	Method	Description
void	close()
SSLParameters	parameters()
X509SslContext	sslContext()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.yahoo.security.tls.TlsContext

createClientSslSocket, createServerSslSocket, createSslEngine, createSslEngine

Constructor Details

ConfigFileBasedTlsContext

public ConfigFileBasedTlsContext(Path tlsOptionsConfigFile,
 AuthorizationMode mode)

ConfigFileBasedTlsContext

public ConfigFileBasedTlsContext(Path tlsOptionsConfigFile,
 AuthorizationMode mode,
 PeerAuthentication peerAuthentication)

Allows the caller to override the default peer authentication mode. This is only intended to be used in situations where the TLS peer authentication is enforced at a higher protocol or application layer (e.g with PeerAuthentication.WANT).

Method Details

sslContext

public X509SslContext sslContext()

Specified by:

sslContext in interface TlsContext

parameters

public SSLParameters parameters()

Specified by:

parameters in interface TlsContext

close

public void close()

Specified by:

close in interface AutoCloseable

Specified by:

close in interface TlsContext