Class TLSParameterBase
- java.lang.Object
-
- org.apache.cxf.configuration.jsse.TLSParameterBase
-
- Direct Known Subclasses:
TLSClientParameters,TLSServerParameters
public class TLSParameterBase extends Object
This class is the base class for SSL/TLS parameters that are common to both client and server sides.
-
-
Field Summary
Fields Modifier and Type Field Description protected StringcertAliasprotected org.apache.cxf.configuration.security.CertificateConstraintsTypecertConstraintsprotected org.apache.cxf.configuration.security.FiltersTypecipherSuiteFiltersprotected List<String>ciphersuitesprotected static Collection<String>DEFAULT_HTTPS_PROTOCOLSprotected KeyManager[]keyManagersprotected Stringprotocolprotected Stringproviderprotected SecureRandomsecureRandomprotected TrustManager[]trustManagers
-
Constructor Summary
Constructors Constructor Description TLSParameterBase()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description StringgetCertAlias()This parameter retrieves the cert alias specified on server sideorg.apache.cxf.configuration.security.CertificateConstraintsTypegetCertConstraints()Get the certificate constraints typeList<String>getCipherSuites()Returns the CipherSuites associated with this endpoint.org.apache.cxf.configuration.security.FiltersTypegetCipherSuitesFilter()Returns the cipher suites filterStringgetJsseProvider()Return the JSSE provider.KeyManager[]getKeyManagers()Returns the key managers for the endpoint.SecureRandomgetSecureRandom()Returns the secure random algorithm.StringgetSecureSocketProtocol()Returns the secure socket protocol in use.TrustManager[]getTrustManagers()Returns the TrustManagers associated with the endpoint.voidsetCertAlias(String ctAlias)This parameter configures the cert alias used on server side this is useful when keystore has multiple certsvoidsetCertConstraints(org.apache.cxf.configuration.security.CertificateConstraintsType constraints)Set the certificate constraints typevoidsetCipherSuites(List<String> cs)This parameter sets the cipher suites list to use.voidsetCipherSuitesFilter(org.apache.cxf.configuration.security.FiltersType filters)This parameter sets the filter to include and/or exclude the cipher suites to use from the set list or system defaults.voidsetJsseProvider(String prov)Set the JSSE provider.voidsetKeyManagers(KeyManager[] keyMgrs)Sets the KeyManagers for this endpoint.voidsetSecureRandom(SecureRandom random)This sets the secure random provider and algorithm.voidsetSecureSocketProtocol(String proto)This sets the protocol to use.voidsetTrustManagers(TrustManager[] trustMgrs)Sets the TrustManagers associated with this endpoint.
-
-
-
Field Detail
-
DEFAULT_HTTPS_PROTOCOLS
protected static final Collection<String> DEFAULT_HTTPS_PROTOCOLS
-
keyManagers
protected KeyManager[] keyManagers
-
trustManagers
protected TrustManager[] trustManagers
-
provider
protected String provider
-
cipherSuiteFilters
protected org.apache.cxf.configuration.security.FiltersType cipherSuiteFilters
-
certConstraints
protected org.apache.cxf.configuration.security.CertificateConstraintsType certConstraints
-
secureRandom
protected SecureRandom secureRandom
-
protocol
protected String protocol
-
certAlias
protected String certAlias
-
-
Method Detail
-
setJsseProvider
public final void setJsseProvider(String prov)
Set the JSSE provider. If not set, it uses system default.
-
getJsseProvider
public String getJsseProvider()
Return the JSSE provider.
-
setKeyManagers
public final void setKeyManagers(KeyManager[] keyMgrs)
Sets the KeyManagers for this endpoint. This parameter may be set to null for system default behavior.
-
getKeyManagers
public KeyManager[] getKeyManagers()
Returns the key managers for the endpoint.
-
setTrustManagers
public final void setTrustManagers(TrustManager[] trustMgrs)
Sets the TrustManagers associated with this endpoint. This parameter may be set to null for system default behavior.
-
getTrustManagers
public TrustManager[] getTrustManagers()
Returns the TrustManagers associated with the endpoint.
-
setCipherSuites
public final void setCipherSuites(List<String> cs)
This parameter sets the cipher suites list to use. If left unset it uses system defaults.
-
getCipherSuites
public List<String> getCipherSuites()
Returns the CipherSuites associated with this endpoint.
-
setCipherSuitesFilter
public final void setCipherSuitesFilter(org.apache.cxf.configuration.security.FiltersType filters)
This parameter sets the filter to include and/or exclude the cipher suites to use from the set list or system defaults.
-
getCipherSuitesFilter
public org.apache.cxf.configuration.security.FiltersType getCipherSuitesFilter()
Returns the cipher suites filter
-
setSecureRandom
public final void setSecureRandom(SecureRandom random)
This sets the secure random provider and algorithm. If left unset or set to null, it uses the system default.
-
getCertConstraints
public org.apache.cxf.configuration.security.CertificateConstraintsType getCertConstraints()
Get the certificate constraints type
-
setCertConstraints
public final void setCertConstraints(org.apache.cxf.configuration.security.CertificateConstraintsType constraints)
Set the certificate constraints type
-
getSecureRandom
public SecureRandom getSecureRandom()
Returns the secure random algorithm.
-
setSecureSocketProtocol
public final void setSecureSocketProtocol(String proto)
This sets the protocol to use. The system default is usually "TLS".
-
getSecureSocketProtocol
public String getSecureSocketProtocol()
Returns the secure socket protocol in use.
-
setCertAlias
public final void setCertAlias(String ctAlias)
This parameter configures the cert alias used on server side this is useful when keystore has multiple certs
-
getCertAlias
public String getCertAlias()
This parameter retrieves the cert alias specified on server side
-
-