Class SSLHostConfig
java.lang.Object
org.apache.tomcat.util.net.SSLHostConfig
- All Implemented Interfaces:
Serializable
Represents the TLS configuration for a virtual host.
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic enumstatic enum -
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidaddCertificate(SSLHostConfigCertificate certificate) static StringadjustRelativePath(String path) getCertificates(boolean createDefaultIfEmpty) intbooleanbooleanString[]String[]booleanbooleanObtain the list of JSSE cipher names for the current configuration.booleanintintbooleanbooleanvoidsetCaCertificateFile(String caCertificateFile) voidsetCaCertificatePath(String caCertificatePath) voidsetCertificateRevocationListFile(String certificateRevocationListFile) voidsetCertificateRevocationListPath(String certificateRevocationListPath) voidsetCertificateVerification(String certificateVerification) voidsetCertificateVerificationAsString(String certificateVerification) voidsetCertificateVerificationDepth(int certificateVerificationDepth) voidsetCiphers(String ciphersList) Set the new cipher configuration.voidsetDisableCompression(boolean disableCompression) voidsetDisableSessionTickets(boolean disableSessionTickets) voidsetEnabledCiphers(String[] enabledCiphers) voidsetEnabledProtocols(String[] enabledProtocols) voidsetHonorCipherOrder(boolean honorCipherOrder) voidsetHostName(String hostName) voidsetInsecureRenegotiation(boolean insecureRenegotiation) voidsetKeyManagerAlgorithm(String keyManagerAlgorithm) voidsetObjectName(ObjectName oname) voidsetOpenSslConf(OpenSSLConf conf) voidsetOpenSslConfContext(Long openSslConfContext) voidsetOpenSslContext(Long openSslContext) voidsetProtocols(String input) voidsetRevocationEnabled(boolean revocationEnabled) voidsetSessionCacheSize(int sessionCacheSize) voidsetSessionTimeout(int sessionTimeout) voidsetSslProtocol(String sslProtocol) voidsetTls13RenegotiationAvailable(boolean tls13RenegotiationAvailable) voidsetTrustManagerClassName(String trustManagerClassName) voidsetTrustStore(KeyStore truststore) voidsetTruststoreAlgorithm(String truststoreAlgorithm) voidsetTruststoreFile(String truststoreFile) voidsetTruststorePassword(String truststorePassword) voidsetTruststoreProvider(String truststoreProvider) voidsetTruststoreType(String truststoreType)
-
Field Details
-
DEFAULT_SSL_HOST_NAME
- See Also:
-
SSL_PROTO_ALL_SET
-
DEFAULT_TLS_CIPHERS
- See Also:
-
-
Constructor Details
-
SSLHostConfig
public SSLHostConfig()
-
-
Method Details
-
isTls13RenegotiationAvailable
public boolean isTls13RenegotiationAvailable() -
setTls13RenegotiationAvailable
public void setTls13RenegotiationAvailable(boolean tls13RenegotiationAvailable) -
getOpenSslConfContext
-
setOpenSslConfContext
-
getOpenSslContext
-
setOpenSslContext
-
getConfigType
-
getEnabledProtocols
- Returns:
- The protocols enabled for this TLS virtual host
- See Also:
-
setEnabledProtocols
-
getEnabledCiphers
- Returns:
- The ciphers enabled for this TLS virtual host
- See Also:
-
setEnabledCiphers
-
getObjectName
-
setObjectName
-
addCertificate
-
getOpenSslConf
-
setOpenSslConf
-
getCertificates
-
getCertificates
-
setCertificateRevocationListFile
-
getCertificateRevocationListFile
-
setCertificateVerification
-
getCertificateVerification
-
setCertificateVerificationAsString
-
getCertificateVerificationAsString
-
setCertificateVerificationDepth
public void setCertificateVerificationDepth(int certificateVerificationDepth) -
getCertificateVerificationDepth
public int getCertificateVerificationDepth() -
isCertificateVerificationDepthConfigured
public boolean isCertificateVerificationDepthConfigured() -
setCiphers
Set the new cipher configuration. Note: Regardless of the format used to set the configuration, it is always stored in OpenSSL format.- Parameters:
ciphersList- The new cipher configuration in OpenSSL or JSSE format
-
getCiphers
- Returns:
- An OpenSSL cipher string for the current configuration.
-
getCipherList
-
getJsseCipherNames
-
setHonorCipherOrder
public void setHonorCipherOrder(boolean honorCipherOrder) -
getHonorCipherOrder
public boolean getHonorCipherOrder() -
setHostName
-
getHostName
- Returns:
- The host name associated with this SSL configuration - always in lower case.
-
setProtocols
-
getProtocols
-
setSessionCacheSize
public void setSessionCacheSize(int sessionCacheSize) -
getSessionCacheSize
public int getSessionCacheSize() -
setSessionTimeout
public void setSessionTimeout(int sessionTimeout) -
getSessionTimeout
public int getSessionTimeout() -
setKeyManagerAlgorithm
-
getKeyManagerAlgorithm
-
setRevocationEnabled
public void setRevocationEnabled(boolean revocationEnabled) -
getRevocationEnabled
public boolean getRevocationEnabled() -
setSslProtocol
-
getSslProtocol
-
setTrustManagerClassName
-
getTrustManagerClassName
-
setTruststoreAlgorithm
-
getTruststoreAlgorithm
-
setTruststoreFile
-
getTruststoreFile
-
setTruststorePassword
-
getTruststorePassword
-
setTruststoreProvider
-
getTruststoreProvider
-
setTruststoreType
-
getTruststoreType
-
setTrustStore
-
getTruststore
- Throws:
IOException
-
setCertificateRevocationListPath
-
getCertificateRevocationListPath
-
setCaCertificateFile
-
getCaCertificateFile
-
setCaCertificatePath
-
getCaCertificatePath
-
setDisableCompression
public void setDisableCompression(boolean disableCompression) -
getDisableCompression
public boolean getDisableCompression() -
setDisableSessionTickets
public void setDisableSessionTickets(boolean disableSessionTickets) -
getDisableSessionTickets
public boolean getDisableSessionTickets() -
setInsecureRenegotiation
public void setInsecureRenegotiation(boolean insecureRenegotiation) -
getInsecureRenegotiation
public boolean getInsecureRenegotiation() -
certificatesExpiringBefore
-
adjustRelativePath
- Throws:
FileNotFoundException
-