Package io.servicetalk.transport.api

Interface ClientSecurityConfigurator

    • Method Detail

      • trustManager

        ClientSecurityConfigurator trustManager​(java.util.function.Supplier<java.io.InputStream> trustCertChainSupplier)
        Deprecated.
        Description copied from interface: SecurityConfigurator
        Trusted certificates for verifying the remote endpoint's certificate. The input stream should contain an X.509 certificate chain in PEM format.
        Specified by:
        trustManager in interface SecurityConfigurator
        Parameters:
        trustCertChainSupplier - a supplier for the certificate chain input stream.

        The responsibility to call InputStream.close() is transferred to callers of the returned Supplier. If this is not the desired behavior then wrap the InputStream and override InputStream.close().

        Returns:
        this.

      • trustManager

        ClientSecurityConfigurator trustManager​(javax.net.ssl.TrustManagerFactory trustManagerFactory)
        Deprecated.
        Description copied from interface: SecurityConfigurator
        Trust manager for verifying the remote endpoint's certificate. The TrustManagerFactory which take preference over any configured Supplier.
        Specified by:
        trustManager in interface SecurityConfigurator
        Parameters:
        trustManagerFactory - the TrustManagerFactory to use.
        Returns:
        this.

      • protocols

        ClientSecurityConfigurator protocols​(java.lang.String... protocols)
        Deprecated.
        Description copied from interface: SecurityConfigurator
        The SSL protocols to enable, in the order of preference.
        Specified by:
        protocols in interface SecurityConfigurator
        Parameters:
        protocols - the protocols to use.
        Returns:
        this.
        See Also:
        SSLEngine.setEnabledProtocols(String[])

      • hostnameVerificationAlgorithm

        ClientSecurityConfigurator hostnameVerificationAlgorithm​(java.lang.String hostNameVerificationAlgorithm)
        Deprecated.
        Determines what algorithm to use for hostname verification.
        Parameters:
        hostNameVerificationAlgorithm - The algorithm to use when verifying the host name. See Supported algorithm names.
        Returns:
        this.
        See Also:
        SSLParameters.setEndpointIdentificationAlgorithm(String)

      • hostnameVerification

        ClientSecurityConfigurator hostnameVerification​(java.lang.String hostNameVerificationAlgorithm,
                                                java.lang.String hostNameVerificationHost)
        Deprecated.
        Determines what algorithm to use for hostname verification.
        Parameters:
        hostNameVerificationAlgorithm - The algorithm to use when verifying the host name. See Supported algorithm names.
        hostNameVerificationHost - the host name used to verify the server identity.
        Returns:
        this.
        See Also:
        SSLParameters.setEndpointIdentificationAlgorithm(String)

      • hostnameVerification

        ClientSecurityConfigurator hostnameVerification​(java.lang.String hostNameVerificationAlgorithm,
                                                java.lang.String hostNameVerificationHost,
                                                int hostNameVerificationPort)
        Deprecated.
        Determines what algorithm to use for hostname verification.
        Parameters:
        hostNameVerificationAlgorithm - The algorithm to use when verifying the host name. See Supported algorithm names.
        hostNameVerificationHost - the host name used to verify the server identity.
        hostNameVerificationPort - The port which maybe used to verify the server identity.
        Returns:
        this.
        See Also:
        SSLParameters.setEndpointIdentificationAlgorithm(String)

      • hostnameVerification

        ClientSecurityConfigurator hostnameVerification​(java.lang.String hostNameVerificationHost)
        Deprecated.
        Set the host name used to verify the server identity.
        Parameters:
        hostNameVerificationHost - the host name used to verify the server identity.
        Returns:
        this.

      • hostnameVerification

        ClientSecurityConfigurator hostnameVerification​(java.lang.String hostNameVerificationHost,
                                                int hostNameVerificationPort)
        Deprecated.
        Set the host name and port used to verify the server identity.
        Parameters:
        hostNameVerificationHost - the host name used to verify the server identity.
        hostNameVerificationPort - The port which maybe used to verify the server identity.
        Returns:
        this.
        See Also:
        SSLParameters.setEndpointIdentificationAlgorithm(String)

      • sniHostname

        ClientSecurityConfigurator sniHostname​(java.lang.String sniHostname)
        Deprecated.
        Set the SNI host name.
        Parameters:
        sniHostname - The SNI host name.
        Returns:
        this.

      • keyManager

        ClientSecurityConfigurator keyManager​(javax.net.ssl.KeyManagerFactory keyManagerFactory)
        Deprecated.
        Identifying certificate for this host. keyManagerFactory may be null, which disables mutual authentication. The KeyManagerFactory which take preference over any configured Supplier.
        Parameters:
        keyManagerFactory - an KeyManagerFactory.
        Returns:
        this.

      • keyManager

        ClientSecurityConfigurator keyManager​(java.util.function.Supplier<java.io.InputStream> keyCertChainSupplier,
                                      java.util.function.Supplier<java.io.InputStream> keySupplier)
        Deprecated.
        Identifying certificate for this host. keyCertChainInputStream and keyInputStream may be null, which disables mutual authentication.
        Parameters:
        keyCertChainSupplier - a Supplier that will provide an input stream for a X.509 certificate chain in PEM format.

        The responsibility to call InputStream.close() is transferred to callers of the Supplier. If this is not the desired behavior then wrap the InputStream and override InputStream.close().

        keySupplier - an Supplier that will provide an input stream for a KCS#8 private key in PEM format.

        The responsibility to call InputStream.close() is transferred to callers of the Supplier. If this is not the desired behavior then wrap the InputStream and override InputStream.close().

        Returns:
        this.

      • keyManager

        ClientSecurityConfigurator keyManager​(java.util.function.Supplier<java.io.InputStream> keyCertChainSupplier,
                                      java.util.function.Supplier<java.io.InputStream> keySupplier,
                                      java.lang.String keyPassword)
        Deprecated.
        Identifying certificate for this host. keyCertChainInputStream and keyInputStream may be null, which disables mutual authentication.
        Parameters:
        keyCertChainSupplier - an Supplier that will provide an input stream for a X.509 certificate chain in PEM format.

        The responsibility to call InputStream.close() is transferred to callers of the Supplier. If this is not the desired behavior then wrap the InputStream and override InputStream.close().

        keySupplier - an Supplier that will provide an input stream for a KCS#8 private key in PEM format.

        The responsibility to call InputStream.close() is transferred to callers of the Supplier. If this is not the desired behavior then wrap the InputStream and override InputStream.close().

        keyPassword - the password of the keyInputStream.
        Returns:
        this.