Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- addSubjectAlternativeName(SubjectAlternativeName) - Method in class com.yahoo.security.Pkcs10CsrBuilder
- addSubjectAlternativeName(SubjectAlternativeName) - Method in class com.yahoo.security.X509CertificateBuilder
- addSubjectAlternativeName(SubjectAlternativeName.Type, String) - Method in class com.yahoo.security.Pkcs10CsrBuilder
- addSubjectAlternativeName(SubjectAlternativeName.Type, String) - Method in class com.yahoo.security.X509CertificateBuilder
- addSubjectAlternativeName(String) - Method in class com.yahoo.security.Pkcs10CsrBuilder
- addSubjectAlternativeName(String) - Method in class com.yahoo.security.X509CertificateBuilder
- aead() - Method in record class com.yahoo.security.hpke.Ciphersuite
-
Returns the value of the
aeadrecord component. - Aead - Interface in com.yahoo.security.hpke
-
Authenticated encryption with associated data (AEAD)
- AeadCipher - Class in com.yahoo.security
-
AEAD cipher wrapper to hide the underlying crypto provider used.
- aeadId() - Method in interface com.yahoo.security.hpke.Aead
-
Predefined AEAD ID, as given in RFC 9180 section 7.3
- aes128Gcm() - Static method in interface com.yahoo.security.hpke.Aead
- all() - Static method in class com.yahoo.security.tls.CapabilitySet
- ALL - Static variable in class com.yahoo.security.tls.CapabilitySet
- ALLOWED_CIPHER_SUITES - Static variable in interface com.yahoo.security.tls.TlsContext
-
Handpicked subset of supported ciphers from https://www.openssl.org/docs/manmaster/man1/ciphers.html based on Modern spec from https://wiki.mozilla.org/Security/Server_Side_TLS For TLSv1.2 we only allow RSA and ECDSA with ephemeral key exchange and GCM.
- ALLOWED_PROTOCOLS - Static variable in interface com.yahoo.security.tls.TlsContext
- allZeros(byte[]) - Static method in class com.yahoo.security.SideChannelSafe
- arraysEqual(byte[], byte[]) - Static method in class com.yahoo.security.SideChannelSafe
-
Compare two byte arrays without the use of data-dependent branching that may leak information about the contents of either of the arrays.
- ArrayUtils - Class in com.yahoo.security
-
A small collection of utils for working on arrays of bytes.
- ArrayUtils() - Constructor for class com.yahoo.security.ArrayUtils
- asBytes() - Method in class com.yahoo.security.KeyId
- asSet() - Method in class com.yahoo.security.tls.CapabilitySet
- asString() - Method in class com.yahoo.security.KeyId
- asString() - Method in enum class com.yahoo.security.tls.Capability
- asString() - Method in interface com.yahoo.security.tls.RequiredPeerCredential.Pattern
- authDecap(byte[], XECPrivateKey, XECPublicKey) - Method in interface com.yahoo.security.hpke.Kem
-
Section 4 Cryptographic Dependencies: "Same as
Decap(), and the recipient is assured that the KEM shared secret was generated by the holder of the private keyskS." - authEncap(XECPublicKey, XECPrivateKey) - Method in interface com.yahoo.security.hpke.Kem
-
Section 4: Cryptographic Dependencies: "Same as
Encap(), and the outputs encode an assurance that the KEM shared secret was generated by the holder of the private keyskS." - AuthorizationMode - Enum Class in com.yahoo.security.tls
- authorized() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
- AuthorizedPeers - Record Class in com.yahoo.security.tls
- AuthorizedPeers(Set<PeerPolicy>) - Constructor for record class com.yahoo.security.tls.AuthorizedPeers
-
Creates an instance of a
AuthorizedPeersrecord class. - authorizePeer(X509Certificate) - Method in class com.yahoo.security.tls.PeerAuthorizer
- authorizePeer(List<X509Certificate>) - Method in class com.yahoo.security.tls.PeerAuthorizer
- AutoReloadingX509KeyManager - Class in com.yahoo.security
-
A
X509ExtendedKeyManagerthat reloads the certificate and private key from file regularly.
B
- base() - Method in class com.yahoo.security.BaseNCodec
- Base58 - Class in com.yahoo.security
-
Base58 encoding using the alphabet standardized by Bitcoin et al., which avoids the use of characters [0OIl] to avoid visual ambiguity.
- Base58() - Constructor for class com.yahoo.security.Base58
- Base62 - Class in com.yahoo.security
-
Base62 encoding which has the nice property that it does not feature any potential word/line-breaking characters, which means encoded strings can usually be selected in one go on web pages or in the terminal.
- Base62() - Constructor for class com.yahoo.security.Base62
- BaseNCodec - Class in com.yahoo.security
-
Codec that enables easy conversion from an array of bytes to any numeric base in [2, 256) and back again, using a supplied custom alphabet.
- BASIC_CONSTRAINTS - Enum constant in enum class com.yahoo.security.Extension
- build() - Method in class com.yahoo.security.KeyStoreBuilder
- build() - Method in class com.yahoo.security.Pkcs10CsrBuilder
- build() - Method in class com.yahoo.security.SslContextBuilder
- build() - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- build() - Method in class com.yahoo.security.X509CertificateBuilder
- buildContext() - Method in class com.yahoo.security.SslContextBuilder
- Builder() - Constructor for class com.yahoo.security.tls.TransportSecurityOptions.Builder
C
- capabilities() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Returns the value of the
capabilitiesrecord component. - capabilities() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns the value of the
capabilitiesrecord component. - CAPABILITIES_ENV_VAR - Static variable in class com.yahoo.security.tls.TransportSecurityUtils
- Capability - Enum Class in com.yahoo.security.tls
- capabilityChecksFailed() - Method in record class com.yahoo.security.tls.TlsMetrics.Diff
-
Returns the value of the
capabilityChecksFailedrecord component. - capabilityChecksFailed() - Method in record class com.yahoo.security.tls.TlsMetrics.Snapshot
-
Returns the value of the
capabilityChecksFailedrecord component. - capabilityChecksSucceeded() - Method in record class com.yahoo.security.tls.TlsMetrics.Diff
-
Returns the value of the
capabilityChecksSucceededrecord component. - capabilityChecksSucceeded() - Method in record class com.yahoo.security.tls.TlsMetrics.Snapshot
-
Returns the value of the
capabilityChecksSucceededrecord component. - capabilityMode() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Returns the value of the
capabilityModerecord component. - CapabilityMode - Enum Class in com.yahoo.security.tls
- capabilityNames() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns the value of the
capabilityNamesrecord component. - CapabilitySet - Class in com.yahoo.security.tls
- certificate() - Method in class com.yahoo.security.X509CertificateWithKey
- CERTIFICATE_ALIAS - Static variable in class com.yahoo.security.AutoReloadingX509KeyManager
- certificateListFromPem(String) - Static method in class com.yahoo.security.X509CertificateUtils
- certificateWithIntermediates() - Method in class com.yahoo.security.X509CertificateWithKey
- changesSince(TlsMetrics.Snapshot) - Method in record class com.yahoo.security.tls.TlsMetrics.Snapshot
- checkClientTrusted(X509Certificate[], String) - Method in class com.yahoo.security.MutableX509TrustManager
- checkClientTrusted(X509Certificate[], String) - Method in class com.yahoo.security.TrustAllX509TrustManager
- checkClientTrusted(X509Certificate[], String, Socket) - Method in class com.yahoo.security.MutableX509TrustManager
- checkClientTrusted(X509Certificate[], String, Socket) - Method in class com.yahoo.security.TrustAllX509TrustManager
- checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class com.yahoo.security.MutableX509TrustManager
- checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class com.yahoo.security.TrustAllX509TrustManager
- checkHashContext() - Method in record class com.yahoo.security.token.TokenDomain
-
Returns the value of the
checkHashContextrecord component. - checkServerTrusted(X509Certificate[], String) - Method in class com.yahoo.security.MutableX509TrustManager
- checkServerTrusted(X509Certificate[], String) - Method in class com.yahoo.security.TrustAllX509TrustManager
- checkServerTrusted(X509Certificate[], String, Socket) - Method in class com.yahoo.security.MutableX509TrustManager
- checkServerTrusted(X509Certificate[], String, Socket) - Method in class com.yahoo.security.TrustAllX509TrustManager
- checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class com.yahoo.security.MutableX509TrustManager
- checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class com.yahoo.security.TrustAllX509TrustManager
- chooseClientAlias(String[], Principal[], Socket) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- chooseClientAlias(String[], Principal[], Socket) - Method in class com.yahoo.security.MutableX509KeyManager
- chooseEngineClientAlias(String[], Principal[], SSLEngine) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- chooseEngineClientAlias(String[], Principal[], SSLEngine) - Method in class com.yahoo.security.MutableX509KeyManager
- chooseEngineServerAlias(String, Principal[], SSLEngine) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- chooseEngineServerAlias(String, Principal[], SSLEngine) - Method in class com.yahoo.security.MutableX509KeyManager
- chooseServerAlias(String, Principal[], Socket) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- chooseServerAlias(String, Principal[], Socket) - Method in class com.yahoo.security.MutableX509KeyManager
- Ciphersuite - Record Class in com.yahoo.security.hpke
-
A Ciphersuite is a 3-tuple that encapsulates the necessary primitives to use HKDF: A key encapsulation mechanism (KEM) A key derivation function (KDF) An "authenticated encryption with associated data" (AEAD) algorithm
- Ciphersuite(Kem, Kdf, Aead) - Constructor for record class com.yahoo.security.hpke.Ciphersuite
-
Creates an instance of a
Ciphersuiterecord class. - ciphertext() - Method in record class com.yahoo.security.hpke.Hpke.Sealed
-
Returns the value of the
ciphertextrecord component. - ciphertext() - Method in record class com.yahoo.security.SealedSharedKey
-
Returns the value of the
ciphertextrecord component. - CLIENT__FILERECEIVER_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CLIENT__SLOBROK_API - Enum constant in enum class com.yahoo.security.tls.Capability
- close() - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- close() - Method in class com.yahoo.security.tls.ConfigFileBasedTlsContext
- close() - Method in interface com.yahoo.security.tls.TlsContext
- CLUSTER_CONTROLLER__REINDEXING - Enum constant in enum class com.yahoo.security.tls.Capability
- CLUSTER_CONTROLLER__STATE - Enum constant in enum class com.yahoo.security.tls.Capability
- CLUSTER_CONTROLLER__STATUS - Enum constant in enum class com.yahoo.security.tls.Capability
- CLUSTER_CONTROLLER_NODE - Static variable in class com.yahoo.security.tls.CapabilitySet
- CN - Enum constant in enum class com.yahoo.security.tls.RequiredPeerCredential.Field
- codec() - Static method in class com.yahoo.security.Base58
- codec() - Static method in class com.yahoo.security.Base62
- com.yahoo.security - package com.yahoo.security
- com.yahoo.security.hpke - package com.yahoo.security.hpke
- com.yahoo.security.tls - package com.yahoo.security.tls
- com.yahoo.security.token - package com.yahoo.security.token
- concat(byte[]...) - Static method in class com.yahoo.security.ArrayUtils
-
Returns a new byte array that is the concatenation of all input byte arrays in input order.
- CONFIG_FILE_ENVIRONMENT_VARIABLE - Static variable in class com.yahoo.security.tls.TransportSecurityUtils
- ConfigFileBasedTlsContext - Class in com.yahoo.security.tls
-
A
TlsContextthat uses the tls configuration specified in the transport security options file. - ConfigFileBasedTlsContext(Path, AuthorizationMode) - Constructor for class com.yahoo.security.tls.ConfigFileBasedTlsContext
- ConfigFileBasedTlsContext(Path, AuthorizationMode, PeerAuthentication) - Constructor for class com.yahoo.security.tls.ConfigFileBasedTlsContext
-
Allows the caller to override the default peer authentication mode.
- CONFIGPROXY__CONFIG_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONFIGPROXY__FILEDISTRIBUTION_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONFIGPROXY__MANAGEMENT_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONFIGSERVER__CONFIG_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONFIGSERVER__FILEDISTRIBUTION_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONFIGSERVER_NODE - Static variable in class com.yahoo.security.tls.CapabilitySet
- configValue() - Method in enum class com.yahoo.security.tls.AuthorizationMode
- configValue() - Method in enum class com.yahoo.security.tls.CapabilityMode
- configValue() - Method in enum class com.yahoo.security.tls.MixedMode
- ConnectionAuthContext - Record Class in com.yahoo.security.tls
- ConnectionAuthContext(List<X509Certificate>, CapabilitySet, Set<String>, CapabilityMode) - Constructor for record class com.yahoo.security.tls.ConnectionAuthContext
-
Creates an instance of a
ConnectionAuthContextrecord class. - CONTAINER__DOCUMENT_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTAINER__MANAGEMENT_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTAINER__STATE_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTAINER_NODE - Static variable in class com.yahoo.security.tls.CapabilitySet
- CONTENT__CLUSTER_CONTROLLER__INTERNAL_STATE_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__DOCUMENT_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__METRICS_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__PROTON_ADMIN_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__SEARCH_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__STATE_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__STATUS_PAGES - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT__STORAGE_API - Enum constant in enum class com.yahoo.security.tls.Capability
- CONTENT_NODE - Static variable in class com.yahoo.security.tls.CapabilitySet
- context() - Method in record class com.yahoo.security.X509SslContext
-
Returns the value of the
contextrecord component. - createClientSslSocket() - Method in interface com.yahoo.security.tls.TlsContext
- createDefaultX509KeyManager() - Static method in class com.yahoo.security.KeyManagerUtils
- createDefaultX509KeyManager(KeyStore, char[]) - Static method in class com.yahoo.security.KeyManagerUtils
- createDefaultX509KeyManager(PrivateKey, List<X509Certificate>) - Static method in class com.yahoo.security.KeyManagerUtils
- createDefaultX509TrustManager() - Static method in class com.yahoo.security.TrustManagerUtils
- createDefaultX509TrustManager(KeyStore) - Static method in class com.yahoo.security.TrustManagerUtils
- createDefaultX509TrustManager(List<X509Certificate>) - Static method in class com.yahoo.security.TrustManagerUtils
- createKeyManager(KeyStore, char[]) - Method in interface com.yahoo.security.SslContextBuilder.KeyManagerFactory
- createSelfSigned(String, Duration) - Static method in class com.yahoo.security.X509CertificateUtils
- createServerSslSocket() - Method in interface com.yahoo.security.tls.TlsContext
- createSigner(PrivateKey) - Static method in class com.yahoo.security.SignatureUtils
-
Returns a signature instance which computes a hash of its content, before signing with the given private key.
- createSigner(PrivateKey, SignatureAlgorithm) - Static method in class com.yahoo.security.SignatureUtils
-
Returns a signature instance which computes a hash of its content, before signing with the given private key.
- createSslEngine() - Method in interface com.yahoo.security.tls.TlsContext
- createSslEngine(String, int) - Method in interface com.yahoo.security.tls.TlsContext
- createTrustManager(KeyStore) - Method in interface com.yahoo.security.SslContextBuilder.TrustManagerFactory
- createVerifier(PublicKey) - Static method in class com.yahoo.security.SignatureUtils
-
Returns a signature instance which computes a hash of its content, before verifying with the given public key.
- createVerifier(PublicKey, SignatureAlgorithm) - Static method in class com.yahoo.security.SignatureUtils
-
Returns a signature instance which computes a hash of its content, before verifying with the given public key.
- CURRENT_TOKEN_VERSION - Static variable in record class com.yahoo.security.SealedSharedKey
-
Current encoding version of opaque sealed key tokens.
- currentManager() - Method in class com.yahoo.security.MutableX509KeyManager
D
- decap(byte[], XECPrivateKey) - Method in interface com.yahoo.security.hpke.Kem
-
Section 4 Cryptographic Dependencies: "Deterministic algorithm using the private key
skRto recover the ephemeral symmetric key (the KEM shared secret) from its encapsulated representationenc." - decode() - Method in class com.yahoo.security.SubjectAlternativeName
- decode(byte[]) - Static method in class com.yahoo.security.YBase64
- decode(String) - Method in class com.yahoo.security.BaseNCodec
- defaultAllCapabilities() - Static method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Construct instance with all capabilities
- defaultAllCapabilities(List<X509Certificate>) - Static method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Construct instance with all capabilities
- defaultSslContext() - Static method in interface com.yahoo.security.tls.TlsContext
- defaultSuite() - Static method in record class com.yahoo.security.hpke.Ciphersuite
-
Returns a Ciphersuite of DHKEM(X25519, HKDF-SHA256), HKDF-SHA256, AES-128-GCM
- DefaultTlsContext - Class in com.yahoo.security.tls
-
A static
TlsContext - defaultValue() - Static method in enum class com.yahoo.security.tls.AuthorizationMode
- defaultValue() - Static method in enum class com.yahoo.security.tls.CapabilityMode
- defaultValue() - Static method in enum class com.yahoo.security.tls.MixedMode
- description() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns the value of the
descriptionrecord component. - dHKemX25519HkdfSha256() - Static method in interface com.yahoo.security.hpke.Kem
- dHKemX25519HkdfSha256(Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting) - Static method in interface com.yahoo.security.hpke.Kem
-
Returns an unsafe test KEM that returns a single fixed, deterministic key pair.
- Diff(long, long) - Constructor for record class com.yahoo.security.tls.TlsMetrics.Diff
-
Creates an instance of a
Diffrecord class. - DIRECTORY - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- DISABLE - Enum constant in enum class com.yahoo.security.tls.AuthorizationMode
- DISABLE - Enum constant in enum class com.yahoo.security.tls.CapabilityMode
- DISABLED - Enum constant in enum class com.yahoo.security.tls.HostnameVerification
- DISABLED - Enum constant in enum class com.yahoo.security.tls.MixedMode
- DISABLED - Enum constant in enum class com.yahoo.security.tls.PeerAuthentication
- DNS - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- dnsNames(Pkcs10Csr) - Static method in class com.yahoo.security.Pkcs10CsrUtils
-
Returns all DNS names contained in given CSR (CN + subject alternative names)
- domain() - Method in class com.yahoo.security.token.Token
E
- EC - Enum constant in enum class com.yahoo.security.KeyAlgorithm
- ecdh(XECPrivateKey, XECPublicKey) - Static method in class com.yahoo.security.KeyUtils
-
Computes a shared secret using the Elliptic Curve Diffie-Hellman (ECDH) protocol for X25519 curves.
- EDI_PARITY - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- EMAIL - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- empty() - Static method in record class com.yahoo.security.tls.AuthorizedPeers
- EMPTY - Static variable in record class com.yahoo.security.tls.TlsMetrics.Snapshot
- ENABLED - Enum constant in enum class com.yahoo.security.tls.HostnameVerification
- enc() - Method in record class com.yahoo.security.hpke.Hpke.Sealed
-
Returns the value of the
encrecord component. - enc() - Method in record class com.yahoo.security.hpke.Kem.EncapResult
-
Returns the value of the
encrecord component. - enc() - Method in record class com.yahoo.security.SealedSharedKey
-
Returns the value of the
encrecord component. - encap(XECPublicKey) - Method in interface com.yahoo.security.hpke.Kem
-
Section 4 Cryptographic Dependencies: "Randomized algorithm to generate an ephemeral, fixed-length symmetric key (the KEM shared secret) and a fixed-length encapsulation of that key that can be decapsulated by the holder of the private key corresponding to
pkR" - EncapResult(byte[], byte[]) - Constructor for record class com.yahoo.security.hpke.Kem.EncapResult
-
Creates an instance of a
EncapResultrecord class. - encode(byte[]) - Method in class com.yahoo.security.BaseNCodec
- encode(byte[]) - Static method in class com.yahoo.security.YBase64
- ENFORCE - Enum constant in enum class com.yahoo.security.tls.AuthorizationMode
- ENFORCE - Enum constant in enum class com.yahoo.security.tls.CapabilityMode
- ephemeralPubKey() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
-
Returns the value of the
ephemeralPubKeyrecord component. - equals(Object) - Method in record class com.yahoo.security.hpke.Ciphersuite
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.hpke.Hpke.Sealed
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.hpke.Kem.EncapResult
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.hpke.Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class com.yahoo.security.KeyId
- equals(Object) - Method in class com.yahoo.security.Pkcs10Csr
- equals(Object) - Method in record class com.yahoo.security.SealedSharedKey
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.SecretSharedKey
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class com.yahoo.security.SubjectAlternativeName
- equals(Object) - Method in record class com.yahoo.security.tls.AuthorizedPeers
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class com.yahoo.security.tls.CapabilitySet
- equals(Object) - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.tls.PeerPolicy
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class com.yahoo.security.tls.RequiredPeerCredential
- equals(Object) - Method in record class com.yahoo.security.tls.TlsMetrics.Diff
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.tls.TlsMetrics.Snapshot
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class com.yahoo.security.tls.TransportSecurityOptions
- equals(Object) - Method in class com.yahoo.security.token.Token
- equals(Object) - Method in record class com.yahoo.security.token.TokenCheckHash
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.token.TokenDomain
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.token.TokenFingerprint
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class com.yahoo.security.X509SslContext
-
Indicates whether some other object is "equal to" this one.
- expand(byte[], byte[], int) - Method in interface com.yahoo.security.hpke.Kdf
-
Expand a pseudorandom key
prkusing optional stringinfointonBytesToExpandbytes of output keying material. - expand(int) - Method in class com.yahoo.security.HKDF
-
Derives a key with a given number of bytes.
- expand(int, byte[]) - Method in class com.yahoo.security.HKDF
-
Derives a key with a given number of bytes for a particular context.
- Extension - Enum Class in com.yahoo.security
- extract(byte[], byte[]) - Method in interface com.yahoo.security.hpke.Kdf
-
Extract a pseudorandom key of fixed length
Kdf.nH()bytes from input keying materialikmand an optional byte stringsalt. - extractedFrom(byte[], byte[]) - Static method in class com.yahoo.security.HKDF
-
Creates and returns a new HKDF instance extracted from the given salt and key.
- extractPublicKey(PrivateKey) - Static method in class com.yahoo.security.KeyUtils
- extractX25519PublicKey(XECPrivateKey) - Static method in class com.yahoo.security.KeyUtils
F
- field() - Method in class com.yahoo.security.tls.RequiredPeerCredential
- fingerprint() - Method in class com.yahoo.security.token.Token
- FINGERPRINT_BITS - Static variable in record class com.yahoo.security.token.TokenFingerprint
- FINGERPRINT_BYTES - Static variable in record class com.yahoo.security.token.TokenFingerprint
- FINGERPRINT_CONTEXT - Static variable in record class com.yahoo.security.token.TokenFingerprint
- from(String) - Static method in enum class com.yahoo.security.KeyAlgorithm
- fromBase58EncodedX25519PrivateKey(String) - Static method in class com.yahoo.security.KeyUtils
- fromBase58EncodedX25519PublicKey(String) - Static method in class com.yahoo.security.KeyUtils
- fromBase64EncodedX25519PrivateKey(String) - Static method in class com.yahoo.security.KeyUtils
- fromBase64EncodedX25519PublicKey(String) - Static method in class com.yahoo.security.KeyUtils
- fromConfigValue(String) - Static method in enum class com.yahoo.security.tls.AuthorizationMode
- fromConfigValue(String) - Static method in enum class com.yahoo.security.tls.CapabilityMode
- fromConfigValue(String) - Static method in enum class com.yahoo.security.tls.MixedMode
- fromCsr(Pkcs10Csr, X500Principal, Instant, Instant, PrivateKey, SignatureAlgorithm, BigInteger) - Static method in class com.yahoo.security.X509CertificateBuilder
- fromFile(Path) - Method in class com.yahoo.security.KeyStoreBuilder
- fromFile(Path, char[]) - Method in class com.yahoo.security.KeyStoreBuilder
- fromJson(String) - Static method in class com.yahoo.security.tls.TransportSecurityOptions
- fromJsonFile(Path) - Static method in class com.yahoo.security.tls.TransportSecurityOptions
- fromKeypair(KeyPair, X500Principal, Instant, Instant, SignatureAlgorithm, BigInteger) - Static method in class com.yahoo.security.X509CertificateBuilder
- fromKeypair(X500Principal, KeyPair, SignatureAlgorithm) - Static method in class com.yahoo.security.Pkcs10CsrBuilder
- fromName(String) - Static method in enum class com.yahoo.security.tls.Capability
- fromNames(Collection<String>) - Static method in class com.yahoo.security.tls.CapabilitySet
- fromPem(String) - Static method in class com.yahoo.security.Pkcs10CsrUtils
- fromPem(String) - Static method in class com.yahoo.security.X509CertificateUtils
- fromPemEncodedPrivateKey(String) - Static method in class com.yahoo.security.KeyUtils
- fromPemEncodedPublicKey(String) - Static method in class com.yahoo.security.KeyUtils
- fromPemFiles(Path, Path) - Static method in class com.yahoo.security.AutoReloadingX509KeyManager
- fromRawX25519PrivateKey(byte[]) - Static method in class com.yahoo.security.KeyUtils
- fromRawX25519PublicKey(byte[]) - Static method in class com.yahoo.security.KeyUtils
- fromSealedKey(SealedSharedKey, PrivateKey) - Static method in class com.yahoo.security.SharedKeyGenerator
- fromSerializedString(String) - Static method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
- fromSerializedString(String) - Static method in record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
- fromTag(int) - Static method in enum class com.yahoo.security.SubjectAlternativeName.Type
- fromTokenString(String) - Static method in record class com.yahoo.security.SealedSharedKey
-
Attempts to unwrap a SealedSharedKey opaque token representation that was previously created by a call to toTokenString().
- fromUtf8Bytes(byte[]) - Static method in class com.yahoo.security.ArrayUtils
G
- generateForReceiverPublicKey(PublicKey, KeyId) - Static method in class com.yahoo.security.SharedKeyGenerator
- generateKeypair(KeyAlgorithm) - Static method in class com.yahoo.security.KeyUtils
- generateKeypair(KeyAlgorithm, int) - Static method in class com.yahoo.security.KeyUtils
- generateRandomSerialNumber() - Static method in class com.yahoo.security.X509CertificateBuilder
- generateToken(TokenDomain, String, int) - Static method in class com.yahoo.security.token.TokenGenerator
- generateX25519KeyPair() - Static method in class com.yahoo.security.KeyUtils
- getAcceptedCiphers() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- getAcceptedIssuers() - Method in class com.yahoo.security.MutableX509TrustManager
- getAcceptedIssuers() - Method in class com.yahoo.security.TrustAllX509TrustManager
- getAcceptedProtocols() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- getAlgorithmName() - Method in enum class com.yahoo.security.SignatureAlgorithm
- getAllowedCipherSuites() - Static method in interface com.yahoo.security.tls.TlsContext
- getAllowedCipherSuites(SSLContext) - Static method in interface com.yahoo.security.tls.TlsContext
- getAllowedProtocols() - Static method in interface com.yahoo.security.tls.TlsContext
- getAllowedProtocols(SSLContext) - Static method in interface com.yahoo.security.tls.TlsContext
- getAuthorizedPeers() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- getBasicConstraints() - Method in class com.yahoo.security.Pkcs10Csr
- getCaCertificatesFile() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- getCapabilityMode() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getCertificateChain(String) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- getCertificateChain(String) - Method in class com.yahoo.security.MutableX509KeyManager
- getCertificatesFile() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- getClientAliases(String, Principal[]) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- getClientAliases(String, Principal[]) - Method in class com.yahoo.security.MutableX509KeyManager
- getCommonNames(X500Principal) - Static method in class com.yahoo.security.X509CertificateUtils
- getConfigFile() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getConfigFile(Map<String, String>) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getConnectionAuthContext(SSLEngine) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getConnectionAuthContext(SSLSession) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getConnectionAuthContext(SSLSocket) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getCurrentCertificateWithKey() - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- getDefault() - Static method in record class com.yahoo.security.X509SslContext
- getExtensionOIds() - Method in class com.yahoo.security.Pkcs10Csr
- getInsecureAuthorizationMode() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getInsecureAuthorizationMode(Map<String, String>) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getInsecureMixedMode() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getInsecureMixedMode(Map<String, String>) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getIssuerCommonNames(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
- getOId() - Method in enum class com.yahoo.security.Extension
- getOptions() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getOptions(Map<String, String>) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getPrivateKey(String) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- getPrivateKey(String) - Method in class com.yahoo.security.MutableX509KeyManager
- getPrivateKeyFile() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- getServerAliases(String, Principal[]) - Method in class com.yahoo.security.AutoReloadingX509KeyManager
- getServerAliases(String, Principal[]) - Method in class com.yahoo.security.MutableX509KeyManager
- getSubject() - Method in class com.yahoo.security.Pkcs10Csr
- getSubjectAlternativeNames() - Method in class com.yahoo.security.Pkcs10Csr
- getSubjectAlternativeNames(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
- getSubjectCommonName(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
- getSubjectCommonNames(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
- getSubjectOrganizationalUnits(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
- getSystemTlsContext() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- getTag() - Method in enum class com.yahoo.security.SubjectAlternativeName.Type
- getType() - Method in class com.yahoo.security.SubjectAlternativeName
- getValue() - Method in class com.yahoo.security.SubjectAlternativeName
- getX509CertificateFingerPrint(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
H
- has(Capability...) - Method in class com.yahoo.security.tls.CapabilitySet
- has(CapabilitySet) - Method in class com.yahoo.security.tls.CapabilitySet
- has(Collection<Capability>) - Method in class com.yahoo.security.tls.CapabilitySet
- hasAll() - Method in class com.yahoo.security.tls.CapabilitySet
- hashBytes() - Method in record class com.yahoo.security.token.TokenCheckHash
-
Returns the value of the
hashBytesrecord component. - hashBytes() - Method in record class com.yahoo.security.token.TokenFingerprint
-
Returns the value of the
hashBytesrecord component. - hashCode() - Method in record class com.yahoo.security.hpke.Ciphersuite
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.hpke.Hpke.Sealed
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.hpke.Kem.EncapResult
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.hpke.Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting
-
Returns a hash code value for this object.
- hashCode() - Method in class com.yahoo.security.KeyId
- hashCode() - Method in class com.yahoo.security.Pkcs10Csr
- hashCode() - Method in record class com.yahoo.security.SealedSharedKey
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.SecretSharedKey
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
-
Returns a hash code value for this object.
- hashCode() - Method in class com.yahoo.security.SubjectAlternativeName
- hashCode() - Method in record class com.yahoo.security.tls.AuthorizedPeers
-
Returns a hash code value for this object.
- hashCode() - Method in class com.yahoo.security.tls.CapabilitySet
- hashCode() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns a hash code value for this object.
- hashCode() - Method in class com.yahoo.security.tls.RequiredPeerCredential
- hashCode() - Method in record class com.yahoo.security.tls.TlsMetrics.Diff
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.tls.TlsMetrics.Snapshot
-
Returns a hash code value for this object.
- hashCode() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- hashCode() - Method in class com.yahoo.security.token.Token
- hashCode() - Method in record class com.yahoo.security.token.TokenCheckHash
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.token.TokenDomain
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.token.TokenFingerprint
-
Returns a hash code value for this object.
- hashCode() - Method in record class com.yahoo.security.X509SslContext
-
Returns a hash code value for this object.
- hasNone() - Method in class com.yahoo.security.tls.CapabilitySet
- hex(byte[]) - Static method in class com.yahoo.security.ArrayUtils
- HKDF - Class in com.yahoo.security
-
Implementation of RFC-5869 HMAC-based Extract-and-Expand Key Derivation Function (HKDF).
- hkdfSha256() - Static method in interface com.yahoo.security.hpke.Kdf
- HostnameVerification - Enum Class in com.yahoo.security.tls
- Hpke - Class in com.yahoo.security.hpke
-
Restricted subset implementation of RFC 9180 Hybrid Public Key Encryption (HPKE)
- Hpke.Sealed - Record Class in com.yahoo.security.hpke
- HTTP_UNCLASSIFIED - Enum constant in enum class com.yahoo.security.tls.Capability
I
- INSECURE_AUTHORIZATION_MODE_ENVIRONMENT_VARIABLE - Static variable in class com.yahoo.security.tls.TransportSecurityUtils
- INSECURE_MIXED_MODE_ENVIRONMENT_VARIABLE - Static variable in class com.yahoo.security.tls.TransportSecurityUtils
- instance() - Static method in class com.yahoo.security.tls.TlsMetrics
- IP - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- isEmpty() - Method in record class com.yahoo.security.tls.AuthorizedPeers
- isHostnameValidationDisabled() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- isTransportSecurityEnabled() - Static method in class com.yahoo.security.tls.TransportSecurityUtils
- isTransportSecurityEnabled(Map<String, String>) - Static method in class com.yahoo.security.tls.TransportSecurityUtils
J
- JKS - Enum constant in enum class com.yahoo.security.KeyStoreType
K
- kdf() - Method in record class com.yahoo.security.hpke.Ciphersuite
-
Returns the value of the
kdfrecord component. - Kdf - Interface in com.yahoo.security.hpke
-
Key derivation function (KDF)
- kdfId() - Method in interface com.yahoo.security.hpke.Kdf
-
Predefined KDF ID, as given in RFC 9180 section 7.2
- kem() - Method in record class com.yahoo.security.hpke.Ciphersuite
-
Returns the value of the
kemrecord component. - Kem - Interface in com.yahoo.security.hpke
-
Key encapsulation mechanism (KEM)
- Kem.EncapResult - Record Class in com.yahoo.security.hpke
- Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting - Record Class in com.yahoo.security.hpke
- kemId() - Method in interface com.yahoo.security.hpke.Kem
-
Predefined KEM ID, as given in RFC 9180 section 7.1
- KeyAlgorithm - Enum Class in com.yahoo.security
- KeyFormat - Enum Class in com.yahoo.security
-
Key format
- keyId() - Method in record class com.yahoo.security.SealedSharedKey
-
Returns the value of the
keyIdrecord component. - KeyId - Class in com.yahoo.security
-
Represents a named key ID comprising an arbitrary (but length-limited) sequence of valid UTF-8 bytes.
- keyManager() - Method in record class com.yahoo.security.X509SslContext
-
Returns the value of the
keyManagerrecord component. - KeyManagerUtils - Class in com.yahoo.security
-
Utility methods for constructing
X509ExtendedKeyManager. - KeyManagerUtils() - Constructor for class com.yahoo.security.KeyManagerUtils
- keyPair() - Method in record class com.yahoo.security.hpke.Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting
-
Returns the value of the
keyPairrecord component. - keyPairFromPemEncodedPrivateKey(String) - Static method in class com.yahoo.security.KeyUtils
- KeyStoreBuilder - Class in com.yahoo.security
- KeyStoreType - Enum Class in com.yahoo.security
- KeyStoreUtils - Class in com.yahoo.security
- KeyUtils - Class in com.yahoo.security
L
- LOG_ONLY - Enum constant in enum class com.yahoo.security.tls.AuthorizationMode
- LOG_ONLY - Enum constant in enum class com.yahoo.security.tls.CapabilityMode
- LOGSERVER_API - Enum constant in enum class com.yahoo.security.tls.Capability
- LOGSERVER_NODE - Static variable in class com.yahoo.security.tls.CapabilitySet
M
- makeDecryptionCipher() - Method in record class com.yahoo.security.SecretSharedKey
- makeEncryptionCipher() - Method in record class com.yahoo.security.SecretSharedKey
- matchedPolicies() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Returns the value of the
matchedPoliciesrecord component. - matches(String) - Method in interface com.yahoo.security.tls.RequiredPeerCredential.Pattern
- MAX_BASE - Static variable in class com.yahoo.security.BaseNCodec
- MAX_ENC_CONTEXT_LENGTH - Static variable in record class com.yahoo.security.SealedSharedKey
-
Encryption context for v{1,2} tokens is always a 32-byte X25519 public key
- MAX_KEY_ID_UTF8_LENGTH - Static variable in class com.yahoo.security.KeyId
- MAX_OUTPUT_SIZE - Static variable in class com.yahoo.security.HKDF
- MAX_TOKEN_STRING_LENGTH - Static variable in record class com.yahoo.security.SealedSharedKey
- METRICSPROXY__MANAGEMENT_API - Enum constant in enum class com.yahoo.security.tls.Capability
- METRICSPROXY__METRICS_API - Enum constant in enum class com.yahoo.security.tls.Capability
- MissingCapabilitiesException - Exception in com.yahoo.security.tls
-
Intentionally checked to force caller to handle missing permissions at call site.
- MissingCapabilitiesException(String) - Constructor for exception com.yahoo.security.tls.MissingCapabilitiesException
- MixedMode - Enum Class in com.yahoo.security.tls
- MutableX509KeyManager - Class in com.yahoo.security
-
A
X509ExtendedKeyManagerwhich can be updated with new certificate chain and private key while in use. - MutableX509KeyManager() - Constructor for class com.yahoo.security.MutableX509KeyManager
- MutableX509KeyManager(KeyStore, char[]) - Constructor for class com.yahoo.security.MutableX509KeyManager
- MutableX509TrustManager - Class in com.yahoo.security
-
A
X509ExtendedTrustManagerwhich can be updated with new CA certificates while in use. - MutableX509TrustManager() - Constructor for class com.yahoo.security.MutableX509TrustManager
- MutableX509TrustManager(KeyStore) - Constructor for class com.yahoo.security.MutableX509TrustManager
N
- NEED - Enum constant in enum class com.yahoo.security.tls.PeerAuthentication
- nEnc() - Method in interface com.yahoo.security.hpke.Kem
-
The length in bytes of an encapsulated key produced by this KEM.
- newEphemeralSession() - Static method in class com.yahoo.security.SharedKeyResealingSession
- nH() - Method in interface com.yahoo.security.hpke.Kdf
-
Output size of the extract() function in bytes
- nK() - Method in interface com.yahoo.security.hpke.Aead
-
The length in bytes of a key for this algorithm.
- nN() - Method in interface com.yahoo.security.hpke.Aead
-
The length in bytes of a nonce for this algorithm.
- none() - Static method in class com.yahoo.security.tls.CapabilitySet
- NONE - Enum constant in enum class com.yahoo.security.tls.Capability
- nPk() - Method in interface com.yahoo.security.hpke.Kem
-
The length in bytes of an encoded public key for this KEM.
- nSecret() - Method in interface com.yahoo.security.hpke.Kem
-
The length in bytes of a KEM shared secret produced by this KEM.
- nSk() - Method in interface com.yahoo.security.hpke.Kem
-
The length in bytes of an encoded private key for this KEM.
- nT() - Method in interface com.yahoo.security.hpke.Aead
-
The length in bytes of the authentication tag for this algorithm.
O
- of(Ciphersuite) - Static method in class com.yahoo.security.hpke.Hpke
- of(Kem, Kdf, Aead) - Static method in record class com.yahoo.security.hpke.Ciphersuite
- of(Capability...) - Static method in class com.yahoo.security.tls.CapabilitySet
- of(RequiredPeerCredential.Field, String) - Static method in class com.yahoo.security.tls.RequiredPeerCredential
- of(Token) - Static method in record class com.yahoo.security.token.TokenFingerprint
- of(TokenDomain, String) - Static method in class com.yahoo.security.token.Token
- of(Token, int) - Static method in record class com.yahoo.security.token.TokenCheckHash
- of(X509SslContext, PeerAuthentication) - Static method in class com.yahoo.security.tls.DefaultTlsContext
- of(X509SslContext, Set<String>, Set<String>, PeerAuthentication) - Static method in class com.yahoo.security.tls.DefaultTlsContext
- of(String) - Static method in class com.yahoo.security.BaseNCodec
- of(String) - Static method in record class com.yahoo.security.token.TokenDomain
- of(Collection<Capability>) - Static method in class com.yahoo.security.tls.CapabilitySet
- of(EnumSet<Capability>) - Static method in class com.yahoo.security.tls.CapabilitySet
- of(List<X509Certificate>, PrivateKey, List<X509Certificate>, AuthorizedPeers, AuthorizationMode, PeerAuthentication, HostnameVerification) - Static method in class com.yahoo.security.tls.DefaultTlsContext
- ofBytes(byte[]) - Static method in class com.yahoo.security.KeyId
-
Construct a KeyId containing the given sequence of bytes.
- ofHex(String) - Static method in record class com.yahoo.security.token.TokenCheckHash
- ofHex(String) - Static method in record class com.yahoo.security.token.TokenFingerprint
- ofPseudoRandomKey(byte[]) - Static method in class com.yahoo.security.HKDF
- ofRawBytes(byte[]) - Static method in record class com.yahoo.security.token.TokenCheckHash
- ofRawBytes(byte[]) - Static method in record class com.yahoo.security.token.TokenFingerprint
- ofSets(Collection<CapabilitySet>) - Static method in class com.yahoo.security.tls.CapabilitySet
- ofString(String) - Static method in class com.yahoo.security.KeyId
-
Construct a KeyId containing the UTF-8 byte representation of the given string.
- open(byte[], byte[], byte[], byte[]) - Method in interface com.yahoo.security.hpke.Aead
- openAuth(byte[], XECPrivateKey, byte[], byte[], byte[], XECPublicKey) - Method in class com.yahoo.security.hpke.Hpke
- openBase(byte[], XECPrivateKey, byte[], byte[], byte[]) - Method in class com.yahoo.security.hpke.Hpke
-
Section 6.1 Encryption and Decryption:
- openResealingResponse(SharedKeyResealingSession.ResealingResponse) - Method in class com.yahoo.security.SharedKeyResealingSession
- OTHER - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
P
- parameters() - Method in class com.yahoo.security.tls.ConfigFileBasedTlsContext
- parameters() - Method in class com.yahoo.security.tls.DefaultTlsContext
- parameters() - Method in interface com.yahoo.security.tls.TlsContext
- pattern() - Method in class com.yahoo.security.tls.RequiredPeerCredential
- PeerAuthentication - Enum Class in com.yahoo.security.tls
- PeerAuthorizationFailedException - Exception in com.yahoo.security.tls
- PeerAuthorizationFailedException(String) - Constructor for exception com.yahoo.security.tls.PeerAuthorizationFailedException
- PeerAuthorizationFailedException(String, List<X509Certificate>) - Constructor for exception com.yahoo.security.tls.PeerAuthorizationFailedException
- PeerAuthorizer - Class in com.yahoo.security.tls
-
Uses rules from
AuthorizedPeersto evaluate X509 certificates - PeerAuthorizer(AuthorizedPeers) - Constructor for class com.yahoo.security.tls.PeerAuthorizer
- peerCertificate() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
- peerCertificateChain() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Returns the value of the
peerCertificateChainrecord component. - peerCertificateChain() - Method in exception com.yahoo.security.tls.PeerAuthorizationFailedException
- peerCertificateString() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
- peerPolicies() - Method in record class com.yahoo.security.tls.AuthorizedPeers
-
Returns the value of the
peerPoliciesrecord component. - PeerPolicy - Record Class in com.yahoo.security.tls
- PeerPolicy(String, String, List<RequiredPeerCredential>) - Constructor for record class com.yahoo.security.tls.PeerPolicy
- PeerPolicy(String, List<RequiredPeerCredential>) - Constructor for record class com.yahoo.security.tls.PeerPolicy
- PeerPolicy(String, Optional<String>, CapabilitySet, List<RequiredPeerCredential>) - Constructor for record class com.yahoo.security.tls.PeerPolicy
- PeerPolicy(String, Optional<String>, Collection<ToCapabilitySet>, List<RequiredPeerCredential>) - Constructor for record class com.yahoo.security.tls.PeerPolicy
- PeerPolicy(String, Optional<String>, Set<String>, CapabilitySet, List<RequiredPeerCredential>) - Constructor for record class com.yahoo.security.tls.PeerPolicy
-
Creates an instance of a
PeerPolicyrecord class. - PeerPolicy(String, Optional<String>, Set<String>, List<RequiredPeerCredential>) - Constructor for record class com.yahoo.security.tls.PeerPolicy
- PKCS1 - Enum constant in enum class com.yahoo.security.KeyFormat
- Pkcs10Csr - Class in com.yahoo.security
- Pkcs10CsrBuilder - Class in com.yahoo.security
- Pkcs10CsrUtils - Class in com.yahoo.security
- PKCS12 - Enum constant in enum class com.yahoo.security.KeyStoreType
- PKCS8 - Enum constant in enum class com.yahoo.security.KeyFormat
- PLAINTEXT_CLIENT_MIXED_SERVER - Enum constant in enum class com.yahoo.security.tls.MixedMode
- policyName() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns the value of the
policyNamerecord component. - privateKey() - Method in class com.yahoo.security.X509CertificateWithKey
- privateKeyForId(KeyId) - Method in interface com.yahoo.security.SharedKeyResealingSession.PrivateKeyProvider
- privateKeyMatchesPublicKey(PrivateKey, PublicKey) - Static method in class com.yahoo.security.X509CertificateUtils
- pseudoRandomKey() - Method in class com.yahoo.security.HKDF
R
- REGISTERED - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- requiredCredentials() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns the value of the
requiredCredentialsrecord component. - RequiredPeerCredential - Class in com.yahoo.security.tls
- RequiredPeerCredential.Field - Enum Class in com.yahoo.security.tls
- RequiredPeerCredential.Pattern - Interface in com.yahoo.security.tls
- reseal(SecretSharedKey, PublicKey, KeyId) - Static method in class com.yahoo.security.SharedKeyGenerator
- reseal(SharedKeyResealingSession.ResealingRequest, SharedKeyResealingSession.PrivateKeyProvider) - Static method in class com.yahoo.security.SharedKeyResealingSession
- resealedKey() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
-
Returns the value of the
resealedKeyrecord component. - ResealingRequest(XECPublicKey, SealedSharedKey) - Constructor for record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
-
Creates an instance of a
ResealingRequestrecord class. - resealingRequestFor(SealedSharedKey) - Method in class com.yahoo.security.SharedKeyResealingSession
- ResealingResponse(SealedSharedKey) - Constructor for record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
-
Creates an instance of a
ResealingResponserecord class. - resolveNames() - Method in class com.yahoo.security.tls.CapabilitySet
-
return name of the capability set if predefined, otherwise names of the individual capabilities
- resolveNames(Collection<ToCapabilitySet>) - Static method in class com.yahoo.security.tls.CapabilitySet
- RESTAPI_UNCLASSIFIED - Enum constant in enum class com.yahoo.security.tls.Capability
- RPC_UNCLASSIFIED - Enum constant in enum class com.yahoo.security.tls.Capability
- RSA - Enum constant in enum class com.yahoo.security.KeyAlgorithm
S
- SAN_DNS - Enum constant in enum class com.yahoo.security.tls.RequiredPeerCredential.Field
- SAN_URI - Enum constant in enum class com.yahoo.security.tls.RequiredPeerCredential.Field
- seal(byte[], byte[], byte[], byte[]) - Method in interface com.yahoo.security.hpke.Aead
- sealAuth(XECPublicKey, byte[], byte[], byte[], XECPrivateKey) - Method in class com.yahoo.security.hpke.Hpke
- sealBase(XECPublicKey, byte[], byte[], byte[]) - Method in class com.yahoo.security.hpke.Hpke
-
Section 6.1 Encryption and Decryption:
- Sealed(byte[], byte[]) - Constructor for record class com.yahoo.security.hpke.Hpke.Sealed
-
Creates an instance of a
Sealedrecord class. - sealedKey() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
-
Returns the value of the
sealedKeyrecord component. - sealedSharedKey() - Method in record class com.yahoo.security.SecretSharedKey
-
Returns the value of the
sealedSharedKeyrecord component. - SealedSharedKey - Record Class in com.yahoo.security
-
A SealedSharedKey represents the public part of a secure one-way ephemeral key exchange.
- SealedSharedKey(int, KeyId, byte[], byte[]) - Constructor for record class com.yahoo.security.SealedSharedKey
-
Creates an instance of a
SealedSharedKeyrecord class. - secretKey() - Method in record class com.yahoo.security.SecretSharedKey
-
Returns the value of the
secretKeyrecord component. - SecretSharedKey - Record Class in com.yahoo.security
-
A SecretSharedKey represents a pairing of both the secret and public parts of a secure one-way ephemeral key exchange.
- SecretSharedKey(SecretKey, SealedSharedKey) - Constructor for record class com.yahoo.security.SecretSharedKey
-
Creates an instance of a
SecretSharedKeyrecord class. - secretTokenString() - Method in class com.yahoo.security.token.Token
- SENTINEL__CONNECTIVITY_CHECK - Enum constant in enum class com.yahoo.security.tls.Capability
- SENTINEL__INSPECT_SERVICES - Enum constant in enum class com.yahoo.security.tls.Capability
- SENTINEL__MANAGEMENT_API - Enum constant in enum class com.yahoo.security.tls.Capability
- setBasicConstraints(boolean, boolean) - Method in class com.yahoo.security.Pkcs10CsrBuilder
- setBasicConstraints(boolean, boolean) - Method in class com.yahoo.security.X509CertificateBuilder
- setIsCertAuthority(boolean) - Method in class com.yahoo.security.Pkcs10CsrBuilder
- setIsCertAuthority(boolean) - Method in class com.yahoo.security.X509CertificateBuilder
- SHA256_WITH_ECDSA - Enum constant in enum class com.yahoo.security.SignatureAlgorithm
- SHA256_WITH_RSA - Enum constant in enum class com.yahoo.security.SignatureAlgorithm
- SHA512_WITH_ECDSA - Enum constant in enum class com.yahoo.security.SignatureAlgorithm
- SHA512_WITH_RSA - Enum constant in enum class com.yahoo.security.SignatureAlgorithm
- SharedKeyGenerator - Class in com.yahoo.security
-
Implements both the sender and receiver sides of a secure, anonymous one-way key generation and exchange protocol implemented using HPKE; a hybrid crypto scheme built around elliptic curves.
- SharedKeyGenerator() - Constructor for class com.yahoo.security.SharedKeyGenerator
- SharedKeyResealingSession - Class in com.yahoo.security
-
Delegated resealing protocol for getting access to a shared secret key of a token whose private key we do not possess.
- SharedKeyResealingSession.PrivateKeyProvider - Interface in com.yahoo.security
- SharedKeyResealingSession.ResealingRequest - Record Class in com.yahoo.security
- SharedKeyResealingSession.ResealingResponse - Record Class in com.yahoo.security
- sharedSecret() - Method in record class com.yahoo.security.hpke.Kem.EncapResult
-
Returns the value of the
sharedSecretrecord component. - SideChannelSafe - Class in com.yahoo.security
-
Utility functions for comparing the contents of arrays without leaking information about the data contained within them via timing side-channels.
- SideChannelSafe() - Constructor for class com.yahoo.security.SideChannelSafe
- SignatureAlgorithm - Enum Class in com.yahoo.security
- SignatureUtils - Class in com.yahoo.security
-
Misc signature utils
- SignatureUtils() - Constructor for class com.yahoo.security.SignatureUtils
- SLOBROK__API - Enum constant in enum class com.yahoo.security.tls.Capability
- snapshot() - Method in class com.yahoo.security.tls.TlsMetrics
- Snapshot(long, long) - Constructor for record class com.yahoo.security.tls.TlsMetrics.Snapshot
-
Creates an instance of a
Snapshotrecord class. - SSL_CONTEXT_VERSION - Static variable in interface com.yahoo.security.tls.TlsContext
-
SSLContextprotocol name that supports at least oldest protocol listed inTlsContext.ALLOWED_PROTOCOLS - sslContext() - Method in class com.yahoo.security.tls.ConfigFileBasedTlsContext
- sslContext() - Method in class com.yahoo.security.tls.DefaultTlsContext
- sslContext() - Method in interface com.yahoo.security.tls.TlsContext
- SslContextBuilder - Class in com.yahoo.security
-
A builder for
SSLContext. - SslContextBuilder() - Constructor for class com.yahoo.security.SslContextBuilder
- SslContextBuilder.KeyManagerFactory - Interface in com.yahoo.security
-
A factory interface for creating
X509ExtendedKeyManager. - SslContextBuilder.TrustManagerFactory - Interface in com.yahoo.security
-
A factory interface for creating
X509ExtendedTrustManager. - SUBJECT_ALTERNATIVE_NAMES - Enum constant in enum class com.yahoo.security.Extension
- SubjectAlternativeName - Class in com.yahoo.security
- SubjectAlternativeName(SubjectAlternativeName.Type, String) - Constructor for class com.yahoo.security.SubjectAlternativeName
- SubjectAlternativeName.Type - Enum Class in com.yahoo.security
T
- TELEMETRY - Static variable in class com.yahoo.security.tls.CapabilitySet
- TLS_CLIENT_MIXED_SERVER - Enum constant in enum class com.yahoo.security.tls.MixedMode
- TlsContext - Interface in com.yahoo.security.tls
-
A simplified version of
SSLContextmodelled as an interface. - TlsMetrics - Class in com.yahoo.security.tls
- TlsMetrics.Diff - Record Class in com.yahoo.security.tls
- TlsMetrics.Snapshot - Record Class in com.yahoo.security.tls
- toBase58EncodedX25519PrivateKey(XECPrivateKey) - Static method in class com.yahoo.security.KeyUtils
- toBase58EncodedX25519PublicKey(XECPublicKey) - Static method in class com.yahoo.security.KeyUtils
- toBase64EncodedX25519PrivateKey(XECPrivateKey) - Static method in class com.yahoo.security.KeyUtils
- toBase64EncodedX25519PublicKey(XECPublicKey) - Static method in class com.yahoo.security.KeyUtils
- toCapabilityNames() - Method in class com.yahoo.security.tls.CapabilitySet
- toCapabilitySet() - Method in enum class com.yahoo.security.tls.Capability
- toCapabilitySet() - Method in class com.yahoo.security.tls.CapabilitySet
- toCapabilitySet() - Method in interface com.yahoo.security.tls.ToCapabilitySet
- ToCapabilitySet - Interface in com.yahoo.security.tls
- toDelimitedHexString() - Method in record class com.yahoo.security.token.TokenFingerprint
- toHexString() - Method in record class com.yahoo.security.token.TokenCheckHash
- toHexString() - Method in record class com.yahoo.security.token.TokenFingerprint
- toJson() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- toJsonFile(Path) - Method in class com.yahoo.security.tls.TransportSecurityOptions
- Token - Class in com.yahoo.security.token
-
A token represents an arbitrary, opaque sequence of secret bytes (preferably from a secure random source) whose possession gives the holder the right to some resource(s) or action(s).
- TokenCheckHash - Record Class in com.yahoo.security.token
-
A token check hash represents a hash derived from a token in such a way that distinct "audiences" for the token compute entirely different hashes even for identical token values.
- TokenCheckHash(byte[]) - Constructor for record class com.yahoo.security.token.TokenCheckHash
-
Creates an instance of a
TokenCheckHashrecord class. - TokenDomain - Record Class in com.yahoo.security.token
-
A token domain controls how token fingerprints and check-hashes are derived from a particular token.
- TokenDomain(byte[]) - Constructor for record class com.yahoo.security.token.TokenDomain
-
Creates an instance of a
TokenDomainrecord class. - TokenFingerprint - Record Class in com.yahoo.security.token
-
A token fingerprint represents an opaque sequence of bytes that is expected to globally identify any particular token within a particular token domain.
- TokenFingerprint(byte[]) - Constructor for record class com.yahoo.security.token.TokenFingerprint
-
Creates an instance of a
TokenFingerprintrecord class. - TokenGenerator - Class in com.yahoo.security.token
-
Generates new
Tokeninstances that encapsulate a given number of cryptographically secure random bytes and, with a sufficiently high number of bytes (>= 16), can be expected to be globally unique and computationally infeasible to guess or brute force. - TokenGenerator() - Constructor for class com.yahoo.security.token.TokenGenerator
- tokenVersion() - Method in record class com.yahoo.security.SealedSharedKey
- toKeyPair(PrivateKey) - Static method in class com.yahoo.security.KeyUtils
- toPem(Pkcs10Csr) - Static method in class com.yahoo.security.Pkcs10CsrUtils
- toPem(X509Certificate) - Static method in class com.yahoo.security.X509CertificateUtils
- toPem(PrivateKey) - Static method in class com.yahoo.security.KeyUtils
- toPem(PrivateKey, KeyFormat) - Static method in class com.yahoo.security.KeyUtils
- toPem(PublicKey) - Static method in class com.yahoo.security.KeyUtils
- toPem(List<X509Certificate>) - Static method in class com.yahoo.security.X509CertificateUtils
- toPredefinedName() - Method in class com.yahoo.security.tls.CapabilitySet
- toRawX25519PrivateKeyBytes(XECPrivateKey) - Static method in class com.yahoo.security.KeyUtils
- toRawX25519PublicKeyBytes(XECPublicKey) - Static method in class com.yahoo.security.KeyUtils
-
Returns the bytes representing the BigInteger of the X25519 public key EC point U coordinate
- toSerializedString() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
- toSerializedString() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
- toString() - Method in record class com.yahoo.security.hpke.Ciphersuite
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.hpke.Hpke.Sealed
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.hpke.Kem.EncapResult
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.hpke.Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting
-
Returns a string representation of this record class.
- toString() - Method in class com.yahoo.security.KeyId
- toString() - Method in record class com.yahoo.security.SealedSharedKey
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.SecretSharedKey
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingRequest
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.SharedKeyResealingSession.ResealingResponse
-
Returns a string representation of this record class.
- toString() - Method in class com.yahoo.security.SubjectAlternativeName
- toString() - Method in record class com.yahoo.security.tls.AuthorizedPeers
-
Returns a string representation of this record class.
- toString() - Method in class com.yahoo.security.tls.CapabilitySet
- toString() - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.tls.PeerPolicy
-
Returns a string representation of this record class.
- toString() - Method in class com.yahoo.security.tls.RequiredPeerCredential
- toString() - Method in record class com.yahoo.security.tls.TlsMetrics.Diff
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.tls.TlsMetrics.Snapshot
-
Returns a string representation of this record class.
- toString() - Method in class com.yahoo.security.tls.TransportSecurityOptions
- toString() - Method in class com.yahoo.security.token.Token
- toString() - Method in record class com.yahoo.security.token.TokenCheckHash
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.token.TokenDomain
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.token.TokenFingerprint
-
Returns a string representation of this record class.
- toString() - Method in record class com.yahoo.security.X509SslContext
-
Returns a string representation of this record class.
- toTokenString() - Method in record class com.yahoo.security.SealedSharedKey
-
Creates an opaque URL-safe string token that contains enough information to losslessly reconstruct the SealedSharedKey instance when passed verbatim to fromTokenString().
- toUtf8Bytes(String) - Static method in class com.yahoo.security.ArrayUtils
- TransportSecurityOptions - Class in com.yahoo.security.tls
-
Generic TLS configuration for Vespa
- TransportSecurityOptions.Builder - Class in com.yahoo.security.tls
- TransportSecurityUtils - Class in com.yahoo.security.tls
-
Utility class for retrieving
TransportSecurityOptionsfrom the system. - TrustAllX509TrustManager - Class in com.yahoo.security
-
A
X509ExtendedTrustManagerthat accepts all server certificates. - TrustAllX509TrustManager() - Constructor for class com.yahoo.security.TrustAllX509TrustManager
- trustManager() - Method in record class com.yahoo.security.X509SslContext
-
Returns the value of the
trustManagerrecord component. - TrustManagerUtils - Class in com.yahoo.security
-
Utility methods for constructing
X509ExtendedTrustManager. - TrustManagerUtils() - Constructor for class com.yahoo.security.TrustManagerUtils
U
- unhex(String) - Static method in class com.yahoo.security.ArrayUtils
- unionOf(Collection<ToCapabilitySet>) - Static method in class com.yahoo.security.tls.CapabilitySet
- UnsafeDeterminsticKeyPairOnlyUsedByTesting(KeyPair) - Constructor for record class com.yahoo.security.hpke.Kem.UnsafeDeterminsticKeyPairOnlyUsedByTesting
-
Creates an instance of a
UnsafeDeterminsticKeyPairOnlyUsedByTestingrecord class. - unsaltedExtractedFrom(byte[]) - Static method in class com.yahoo.security.HKDF
-
Creates and returns a new unsalted HKDF instance extracted from the given key.
- updateKeystore(KeyStore, char[]) - Method in class com.yahoo.security.MutableX509KeyManager
- updateTruststore(KeyStore) - Method in class com.yahoo.security.MutableX509TrustManager
- URI - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- useDefaultKeystore() - Method in class com.yahoo.security.MutableX509KeyManager
- useDefaultTruststore() - Method in class com.yahoo.security.MutableX509TrustManager
V
- valueOf(String) - Static method in enum class com.yahoo.security.Extension
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.KeyAlgorithm
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.KeyFormat
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.KeyStoreType
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.SignatureAlgorithm
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.SubjectAlternativeName.Type
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.AuthorizationMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.Capability
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.CapabilityMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.HostnameVerification
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.MixedMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.PeerAuthentication
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class com.yahoo.security.tls.RequiredPeerCredential.Field
-
Returns the enum constant of this class with the specified name.
- values() - Static method in enum class com.yahoo.security.Extension
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.KeyAlgorithm
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.KeyFormat
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.KeyStoreType
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.SignatureAlgorithm
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.SubjectAlternativeName.Type
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.AuthorizationMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.Capability
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.CapabilityMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.HostnameVerification
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.MixedMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.PeerAuthentication
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class com.yahoo.security.tls.RequiredPeerCredential.Field
-
Returns an array containing the constants of this enum class, in the order they are declared.
- verifyCapabilities(CapabilitySet) - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Throws checked exception to force caller to handle verification failed.
- verifyCapabilities(CapabilitySet, String, String, String) - Method in record class com.yahoo.security.tls.ConnectionAuthContext
-
Throws checked exception to force caller to handle verification failed.
- version() - Method in record class com.yahoo.security.SealedSharedKey
-
Returns the value of the
versionrecord component.
W
- WANT - Enum constant in enum class com.yahoo.security.tls.PeerAuthentication
- withAcceptedCiphers(List<String>) - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- withAcceptedProtocols(List<String>) - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- withAuthorizedPeers(AuthorizedPeers) - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- withCaCertificates(Path) - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- withCertificateEntries(String, List<X509Certificate>) - Method in class com.yahoo.security.KeyStoreBuilder
- withCertificateEntry(String, X509Certificate) - Method in class com.yahoo.security.KeyStoreBuilder
- withCertificates(Path, Path) - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- withHostnameValidationDisabled(boolean) - Method in class com.yahoo.security.tls.TransportSecurityOptions.Builder
- withKeyEntry(String, PrivateKey, char[], X509Certificate) - Method in class com.yahoo.security.KeyStoreBuilder
- withKeyEntry(String, PrivateKey, char[], List<X509Certificate>) - Method in class com.yahoo.security.KeyStoreBuilder
- withKeyEntry(String, PrivateKey, X509Certificate) - Method in class com.yahoo.security.KeyStoreBuilder
- withKeyEntry(String, PrivateKey, List<X509Certificate>) - Method in class com.yahoo.security.KeyStoreBuilder
- withKeyManager(X509ExtendedKeyManager) - Method in class com.yahoo.security.SslContextBuilder
-
Note: Callee is responsible for configuring the key manager.
- withKeyManagerFactory(SslContextBuilder.KeyManagerFactory) - Method in class com.yahoo.security.SslContextBuilder
- withKeyStore(Path, char[], KeyStoreType) - Method in class com.yahoo.security.SslContextBuilder
- withKeyStore(Path, Path) - Method in class com.yahoo.security.SslContextBuilder
- withKeyStore(KeyStore, char[]) - Method in class com.yahoo.security.SslContextBuilder
- withKeyStore(PrivateKey, X509Certificate) - Method in class com.yahoo.security.SslContextBuilder
- withKeyStore(PrivateKey, List<X509Certificate>) - Method in class com.yahoo.security.SslContextBuilder
- withKeyStore(List<X509CertificateWithKey>) - Method in class com.yahoo.security.SslContextBuilder
- withTrustManager(X509ExtendedTrustManager) - Method in class com.yahoo.security.SslContextBuilder
-
Note: Callee is responsible for configuring the trust manager.
- withTrustManagerFactory(SslContextBuilder.TrustManagerFactory) - Method in class com.yahoo.security.SslContextBuilder
- withTrustStore(Path) - Method in class com.yahoo.security.SslContextBuilder
- withTrustStore(Path, KeyStoreType) - Method in class com.yahoo.security.SslContextBuilder
- withTrustStore(X509Certificate) - Method in class com.yahoo.security.SslContextBuilder
- withTrustStore(KeyStore) - Method in class com.yahoo.security.SslContextBuilder
- withTrustStore(List<X509Certificate>) - Method in class com.yahoo.security.SslContextBuilder
- withType(KeyStoreType) - Static method in class com.yahoo.security.KeyStoreBuilder
- wrapInputStream(InputStream) - Method in class com.yahoo.security.AeadCipher
-
Returns a wrapping
InputStreamthat, depending on the cipher mode, either encrypts or decrypts all data that is read from the underlying input stream. - wrapOutputStream(OutputStream) - Method in class com.yahoo.security.AeadCipher
-
Returns a wrapping
OutputStreamthat, depending on the cipher mode, either encrypts or decrypts all data that is written to it before passing it on toout. - writeKeyStoreToFile(KeyStore, Path) - Static method in class com.yahoo.security.KeyStoreUtils
- writeKeyStoreToFile(KeyStore, Path, char[]) - Static method in class com.yahoo.security.KeyStoreUtils
X
- X400 - Enum constant in enum class com.yahoo.security.SubjectAlternativeName.Type
- X509CertificateBuilder - Class in com.yahoo.security
- X509CertificateUtils - Class in com.yahoo.security
- X509CertificateWithKey - Class in com.yahoo.security
-
Wraps a
X509Certificatewith itsPrivateKey. - X509CertificateWithKey(X509Certificate, PrivateKey) - Constructor for class com.yahoo.security.X509CertificateWithKey
- X509CertificateWithKey(List<X509Certificate>, PrivateKey) - Constructor for class com.yahoo.security.X509CertificateWithKey
- X509SslContext - Record Class in com.yahoo.security
- X509SslContext(SSLContext, X509ExtendedTrustManager, X509ExtendedKeyManager) - Constructor for record class com.yahoo.security.X509SslContext
-
Creates an instance of a
X509SslContextrecord class. - XDH - Enum constant in enum class com.yahoo.security.KeyAlgorithm
Y
- YBase64 - Class in com.yahoo.security
-
Variant of
Base64with the following modifications: -+is replaced by.-/is replaced by {code _} -=is replaced by {code -}
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form