Class SslDomainImpl

    • Method Detail

      • init

        public void init​(SslDomain.Mode mode)
        Description copied from interface: SslDomain
        Initialize the ssl domain object. An SSL object be either an SSL server or an SSL client. It cannot be both. Those transports that will be used to accept incoming connection requests must be configured as an SSL server. Those transports that will be used to initiate outbound connections must be configured as an SSL client.
        Specified by:
        init in interface SslDomain
      • setCredentials

        public void setCredentials​(java.lang.String certificateFile,
                                   java.lang.String privateKeyFile,
                                   java.lang.String privateKeyPassword)
        Description copied from interface: SslDomain
        Set the certificate that identifies the local node to the remote. This certificate establishes the identity for the local node. It will be sent to the remote if the remote needs to verify the identity of this node. This may be used for both SSL servers and SSL clients (if client authentication is required by the server).
        Specified by:
        setCredentials in interface SslDomain
        Parameters:
        certificateFile - path to file/database containing the identifying certificate.
        privateKeyFile - path to file/database containing the private key used to sign the certificate
        privateKeyPassword - the password used to sign the key, else null if key is not protected.
      • setTrustedCaDb

        public void setTrustedCaDb​(java.lang.String certificateDb)
        Description copied from interface: SslDomain
        Configure the set of trusted CA certificates used by this node to verify peers. If the local SSL client/server needs to verify the identity of the remote, it must validate the signature of the remote's certificate. This function sets the database of trusted CAs that will be used to verify the signature of the remote's certificate.
        Specified by:
        setTrustedCaDb in interface SslDomain
        Parameters:
        certificateDb - database of trusted CAs, used to authenticate the peer.
      • setSslContext

        public void setSslContext​(javax.net.ssl.SSLContext sslContext)
        Description copied from interface: SslDomain
        Sets an SSLContext for use when establishing SSL transport. Setting a context this way overrides alternate configuration that might otherwise have been used to create a context, such as key and trust store paths.
        Specified by:
        setSslContext in interface SslDomain
        Parameters:
        sslContext - the context to use
      • allowUnsecuredClient

        public void allowUnsecuredClient​(boolean allowUnsecured)
        Description copied from interface: SslDomain
        Permit a server to accept connection requests from non-SSL clients. This configures the server to "sniff" the incoming client data stream, and dynamically determine whether SSL/TLS is being used. This option is disabled by default: only clients using SSL/TLS are accepted.
        Specified by:
        allowUnsecuredClient in interface SslDomain
      • toString

        public java.lang.String toString()
        Overrides:
        toString in class java.lang.Object