| org.mortbay.jetty.bio.SocketConnector
 org.mortbay.jetty.security.SslSocketConnector
| SslSocketConnector | | public class SslSocketConnector extends SocketConnector (Code) | | JSSE Socket Listener.
This specialization of HttpListener is an abstract listener that can be used as the basis for a
specific JSSE listener.
This is heavily based on the work from Court Demas, which in turn is based on the work from Forge
Research.
author:
Greg Wilkins (gregw@mortbay.com)
author:
Court Demas (court@kiwiconsulting.com)
author:
Forge Research Pty Ltd ACN 003 491 576
author:
Jan Hlavat� |
| CACHED_INFO_ATTR | | final static String CACHED_INFO_ATTR(Code) | | The name of the SSLSession attribute that will contain any cached information.
|
| KEYPASSWORD_PROPERTY | | final public static String KEYPASSWORD_PROPERTY(Code) | | String name of key password property.
|
| PASSWORD_PROPERTY | | final public static String PASSWORD_PROPERTY(Code) | | String name of keystore password property.
|
| SslSocketConnector | | public SslSocketConnector()(Code) | | Constructor.
|
| customize | | public void customize(EndPoint endpoint, Request request) throws IOException(Code) | | Allow the Listener a chance to customise the request. before the server does its stuff.
This allows the required attributes to be set for SSL requests.
The requirements of the Servlet specs are:
- an attribute named "javax.servlet.request.cipher_suite" of type String.
- an attribute named "javax.servlet.request.key_size" of type Integer.
- an attribute named "javax.servlet.request.X509Certificate" of type
java.security.cert.X509Certificate[]. This is an array of objects of type X509Certificate,
the order of this array is defined as being in ascending order of trust. The first
certificate in the chain is the one set by the client, the next is the one used to
authenticate the first, and so on.
Parameters:
endpoint - The Socket the request arrived on. This should be a SocketEndPoint wrapping a SSLSocket.
Parameters:
request - HttpRequest to be customised. |
| getExcludeCipherSuites | | public String[] getExcludeCipherSuites()(Code) | | |
| getNeedClientAuth | | public boolean getNeedClientAuth()(Code) | | |
| getSecureRandomAlgorithm | | public String getSecureRandomAlgorithm()(Code) | | |
| getSslKeyManagerFactoryAlgorithm | | public String getSslKeyManagerFactoryAlgorithm()(Code) | | |
| getSslTrustManagerFactoryAlgorithm | | public String getSslTrustManagerFactoryAlgorithm()(Code) | | |
| getWantClientAuth | | public boolean getWantClientAuth()(Code) | | |
| isConfidential | | public boolean isConfidential(Request request)(Code) | | By default, we're confidential, given we speak SSL. But, if we've been told about an
confidential port, and said port is not our port, then we're not. This allows separation of
listeners providing INTEGRAL versus CONFIDENTIAL constraints, such as one SSL listener
configured to require client certs providing CONFIDENTIAL, whereas another SSL listener not
requiring client certs providing mere INTEGRAL constraints.
|
| isIntegral | | public boolean isIntegral(Request request)(Code) | | By default, we're integral, given we speak SSL. But, if we've been told about an integral
port, and said port is not our port, then we're not. This allows separation of listeners
providing INTEGRAL versus CONFIDENTIAL constraints, such as one SSL listener configured to
require client certs providing CONFIDENTIAL, whereas another SSL listener not requiring
client certs providing mere INTEGRAL constraints.
|
| setExcludeCipherSuites | | public void setExcludeCipherSuites(String[] cipherSuites)(Code) | |
author:
Tony Jiang |
| setKeyPassword | | public void setKeyPassword(String password)(Code) | | |
| setKeystoreType | | public void setKeystoreType(String keystoreType)(Code) | | |
| setNeedClientAuth | | public void setNeedClientAuth(boolean needClientAuth)(Code) | | Set the value of the needClientAuth property
Parameters:
needClientAuth - true iff we require client certificate authentication. |
| setSecureRandomAlgorithm | | public void setSecureRandomAlgorithm(String algorithm)(Code) | | |
| setSslKeyManagerFactoryAlgorithm | | public void setSslKeyManagerFactoryAlgorithm(String algorithm)(Code) | | |
| setSslTrustManagerFactoryAlgorithm | | public void setSslTrustManagerFactoryAlgorithm(String algorithm)(Code) | | |
| setTrustPassword | | public void setTrustPassword(String password)(Code) | | |
| setTruststore | | public void setTruststore(String truststore)(Code) | | |
| setTruststoreType | | public void setTruststoreType(String truststoreType)(Code) | | |
|
|