Package com.yahoo.security.tls

Class TransportSecurityUtils

java.lang.Object

com.yahoo.security.tls.TransportSecurityUtils

public class TransportSecurityUtils
extends Object

Utility class for retrieving TransportSecurityOptions from the system.

Author:

bjorncs

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CAPABILITIES_ENV_VAR
static final String	CONFIG_FILE_ENVIRONMENT_VARIABLE
static final String	INSECURE_AUTHORIZATION_MODE_ENVIRONMENT_VARIABLE
static final String	INSECURE_MIXED_MODE_ENVIRONMENT_VARIABLE

Method Summary

Modifier and Type	Method	Description
static CapabilityMode	getCapabilityMode()
static Optional<Path>	getConfigFile()
static Optional<Path>	getConfigFile(Map<String,String> envVariables)
static Optional<ConnectionAuthContext>	getConnectionAuthContext(SSLEngine e)
static Optional<ConnectionAuthContext>	getConnectionAuthContext(SSLSession s)
static Optional<ConnectionAuthContext>	getConnectionAuthContext(SSLSocket s)
static AuthorizationMode	getInsecureAuthorizationMode()
static AuthorizationMode	getInsecureAuthorizationMode(Map<String,String> envVariables)
static MixedMode	getInsecureMixedMode()
static MixedMode	getInsecureMixedMode(Map<String,String> envVariables)
static Optional<TransportSecurityOptions>	getOptions()
static Optional<TransportSecurityOptions>	getOptions(Map<String,String> envVariables)
static Optional<TlsContext>	getSystemTlsContext()
static boolean	isTransportSecurityEnabled()
static boolean	isTransportSecurityEnabled(Map<String,String> envVariables)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CONFIG_FILE_ENVIRONMENT_VARIABLE

public static final String CONFIG_FILE_ENVIRONMENT_VARIABLE

See Also:

• Constant Field Values

INSECURE_MIXED_MODE_ENVIRONMENT_VARIABLE

public static final String INSECURE_MIXED_MODE_ENVIRONMENT_VARIABLE

See Also:

• Constant Field Values

INSECURE_AUTHORIZATION_MODE_ENVIRONMENT_VARIABLE

public static final String INSECURE_AUTHORIZATION_MODE_ENVIRONMENT_VARIABLE

See Also:

• Constant Field Values

CAPABILITIES_ENV_VAR

public static final String CAPABILITIES_ENV_VAR

See Also:

• Constant Field Values

Method Details

isTransportSecurityEnabled

public static boolean isTransportSecurityEnabled()

isTransportSecurityEnabled

public static boolean isTransportSecurityEnabled(Map<String,String> envVariables)

getInsecureMixedMode

public static MixedMode getInsecureMixedMode()

getInsecureMixedMode

public static MixedMode getInsecureMixedMode(Map<String,String> envVariables)

getInsecureAuthorizationMode

public static AuthorizationMode getInsecureAuthorizationMode()

getInsecureAuthorizationMode

public static AuthorizationMode getInsecureAuthorizationMode(Map<String,String> envVariables)

getCapabilityMode

public static CapabilityMode getCapabilityMode()

getConfigFile

public static Optional<Path> getConfigFile()

getConfigFile

public static Optional<Path> getConfigFile(Map<String,String> envVariables)

getOptions

public static Optional<TransportSecurityOptions> getOptions()

getOptions

public static Optional<TransportSecurityOptions> getOptions(Map<String,String> envVariables)

getSystemTlsContext

public static Optional<TlsContext> getSystemTlsContext()

Returns:

The shared TlsContext for the Vespa system environment

getConnectionAuthContext

public static Optional<ConnectionAuthContext> getConnectionAuthContext(SSLSession s)

Returns:

ConnectionAuthContext instance if SSLEngine was constructed by a TlsContext. Only available after TLS handshake is completed.

getConnectionAuthContext

public static Optional<ConnectionAuthContext> getConnectionAuthContext(SSLEngine e)

See Also:

• getConnectionAuthContext(SSLSession)

getConnectionAuthContext

public static Optional<ConnectionAuthContext> getConnectionAuthContext(SSLSocket s)

See Also:

• getConnectionAuthContext(SSLSession)