Class OpenSslServerContext

java.lang.Object

io.netty.handler.ssl.SslContext

io.netty.handler.ssl.ReferenceCountedOpenSslContext

io.netty.handler.ssl.OpenSslContext

io.netty.handler.ssl.OpenSslServerContext

All Implemented Interfaces:

ReferenceCounted

public final class OpenSslServerContext
extends OpenSslContext

A server-side SslContext which uses OpenSSL's SSL/TLS implementation.

This class will use a finalizer to ensure native resources are automatically cleaned up. To avoid finalizers and manually release the native memory see ReferenceCountedOpenSslServerContext.

Field Summary

Fields inherited from class ReferenceCountedOpenSslContext

ctx, VERIFY_DEPTH

Modifier and Type	Field	Description
protected long	ctx	The OpenSSL SSL_CTX object.
protected static final int	VERIFY_DEPTH

Fields inherited from class SslContext

defaultEndpointVerificationAlgorithm

Modifier and Type	Field	Description
protected static final String	defaultEndpointVerificationAlgorithm	Endpoint verification is enabled by default from Netty 4.2 onward, but it wasn't in Netty 4.1 and earlier.

Constructor Summary

Constructors

Constructor	Description
OpenSslServerContext(File certChainFile, File keyFile)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, Iterable<String> nextProtocols, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, ApplicationProtocolConfig config, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig config, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, OpenSslApplicationProtocolNegotiator apn, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder}
OpenSslServerContext(File certChainFile, File keyFile, String keyPassword, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, OpenSslApplicationProtocolNegotiator apn, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File trustCertCollectionFile, TrustManagerFactory trustManagerFactory, File keyCertChainFile, File keyFile, String keyPassword, KeyManagerFactory keyManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig config, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder
OpenSslServerContext(File trustCertCollectionFile, TrustManagerFactory trustManagerFactory, File keyCertChainFile, File keyFile, String keyPassword, KeyManagerFactory keyManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, OpenSslApplicationProtocolNegotiator apn, long sessionCacheSize, long sessionTimeout)	Deprecated. use SslContextBuilder

Method Summary

Modifier and Type	Method	Description
OpenSslServerSessionContext	sessionContext()	Returns the SSLSessionContext object held by this context.

Methods inherited from class OpenSslContext

finalize

Modifier and Type	Method	Description
protected final void	finalize()

Methods inherited from class ReferenceCountedOpenSslContext

applicationProtocolNegotiator, certificates, chooseTrustManager, chooseX509KeyManager, cipherSuites, context, getBioNonApplicationBufferSize, getRejectRemoteInitiatedRenegotiation, isClient, newEngine, newEngine, newHandler, newHandler, newHandler, newHandler, refCnt, release, release, retain, retain, setBioNonApplicationBufferSize, setPrivateKeyMethod, setRejectRemoteInitiatedRenegotiation, setTicketKeys, setUseTasks, sslCtxPointer, stats, touch, touch

Modifier and Type	Method	Description
ApplicationProtocolNegotiator	applicationProtocolNegotiator()	Returns the object responsible for negotiating application layer protocols for the TLS NPN/ALPN extensions.
protected static X509Certificate[]	certificates(byte[][] chain)
protected static X509TrustManager	chooseTrustManager(TrustManager[] managers)	Deprecated. This method is kept for API backwards compatibility.
protected static X509KeyManager	chooseX509KeyManager(KeyManager[] kms)
final List<String>	cipherSuites()	Returns the list of enabled cipher suites, in the order of preference.
final long	context()	Deprecated. this method is considered unsafe as the returned pointer may be released later.
int	getBioNonApplicationBufferSize()	Returns the size of the buffer used by the BIO for non-application based writes
boolean	getRejectRemoteInitiatedRenegotiation()	Deprecated.
final boolean	isClient()	Returns the true if and only if this context is for client-side.
final SSLEngine	newEngine(ByteBufAllocator alloc)	Returns a new server-side SSLEngine with the current configuration.
final SSLEngine	newEngine(ByteBufAllocator alloc, String peerHost, int peerPort)	Creates a new SSLEngine using advisory peer information.
protected final SslHandler	newHandler(ByteBufAllocator alloc, boolean startTls)	Create a new SslHandler.
protected SslHandler	newHandler(ByteBufAllocator alloc, boolean startTls, Executor executor)	Create a new SslHandler.
protected final SslHandler	newHandler(ByteBufAllocator alloc, String peerHost, int peerPort, boolean startTls)	Create a new SslHandler.
protected SslHandler	newHandler(ByteBufAllocator alloc, String peerHost, int peerPort, boolean startTls, Executor executor)
final int	refCnt()	Returns the reference count of this object.
final boolean	release()	Decreases the reference count by 1 and deallocates this object if the reference count reaches at 0.
final boolean	release(int decrement)	Decreases the reference count by the specified decrement and deallocates this object if the reference count reaches at 0.
final ReferenceCounted	retain()	Increases the reference count by 1.
final ReferenceCounted	retain(int increment)	Increases the reference count by the specified increment.
void	setBioNonApplicationBufferSize(int bioNonApplicationBufferSize)	Set the size of the buffer used by the BIO for non-application based writes (e.g. handshake, renegotiation, etc...).
final void	setPrivateKeyMethod(OpenSslPrivateKeyMethod method)	Deprecated. use SslContextBuilder.option(SslContextOption, Object) with OpenSslContextOption.PRIVATE_KEY_METHOD.
void	setRejectRemoteInitiatedRenegotiation(boolean rejectRemoteInitiatedRenegotiation)	Deprecated.
final void	setTicketKeys(byte[] keys)	Deprecated. use OpenSslSessionContext.setTicketKeys(byte[])
final void	setUseTasks(boolean useTasks)	Deprecated. use SslContextBuilder.option(SslContextOption, Object) with OpenSslContextOption.USE_TASKS.
final long	sslCtxPointer()	Deprecated. this method is considered unsafe as the returned pointer may be released later.
final OpenSslSessionStats	stats()	Deprecated. use invalid @link {@link #sessionContext#stats() }
final ReferenceCounted	touch()	Records the current access location of this object for debugging purposes.
final ReferenceCounted	touch(Object hint)	Records the current access location of this object with an additional arbitrary information for debugging purposes.

Methods inherited from class SslContext

attributes, buildKeyManagerFactory, buildKeyStore, buildTrustManagerFactory, buildTrustManagerFactory, buildTrustManagerFactory, defaultClientProvider, defaultServerProvider, generateKeySpec, isServer, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newHandler, newHandler, newHandler, newHandler, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, nextProtocols, sessionCacheSize, sessionTimeout, toPrivateKey, toPrivateKey, toX509Certificates, toX509Certificates

Modifier and Type	Method	Description
final AttributeMap	attributes()	Returns the AttributeMap that belongs to this SslContext .
protected static KeyManagerFactory	buildKeyManagerFactory(X509Certificate[] certChainFile, String keyAlgorithm, PrivateKey key, String keyPassword, KeyManagerFactory kmf, String keyStore)
protected static KeyStore	buildKeyStore(X509Certificate[] certChain, PrivateKey key, char[] keyPasswordChars, String keyStoreType)	Generates a new KeyStore.
protected static TrustManagerFactory	buildTrustManagerFactory(File certChainFile, TrustManagerFactory trustManagerFactory)	Deprecated.
protected static TrustManagerFactory	buildTrustManagerFactory(File certChainFile, TrustManagerFactory trustManagerFactory, String keyType)	Build a TrustManagerFactory from a certificate chain file.
protected static TrustManagerFactory	buildTrustManagerFactory(X509Certificate[] certCollection, TrustManagerFactory trustManagerFactory, String keyStoreType)
static SslProvider	defaultClientProvider()	Returns the default client-side implementation provider currently in use.
static SslProvider	defaultServerProvider()	Returns the default server-side implementation provider currently in use.
protected static PKCS8EncodedKeySpec	generateKeySpec(char[] password, byte[] key)	Deprecated.
final boolean	isServer()	Returns true if and only if this context is for server-side.
static SslContext	newClientContext()	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider, File certChainFile)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider, File certChainFile, TrustManagerFactory trustManagerFactory)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider, File trustCertCollectionFile, TrustManagerFactory trustManagerFactory, File keyCertChainFile, File keyFile, String keyPassword, KeyManagerFactory keyManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider, File certChainFile, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider, File certChainFile, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, Iterable<String> nextProtocols, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(SslProvider provider, TrustManagerFactory trustManagerFactory)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(File certChainFile)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(File certChainFile, TrustManagerFactory trustManagerFactory)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(File certChainFile, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(File certChainFile, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, Iterable<String> nextProtocols, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newClientContext(TrustManagerFactory trustManagerFactory)	Deprecated. Replaced by SslContextBuilder
final SslHandler	newHandler(ByteBufAllocator alloc)	Create a new SslHandler.
final SslHandler	newHandler(ByteBufAllocator alloc, String peerHost, int peerPort)	Creates a new SslHandler
SslHandler	newHandler(ByteBufAllocator alloc, String peerHost, int peerPort, Executor delegatedTaskExecutor)	Creates a new SslHandler with advisory peer information.
SslHandler	newHandler(ByteBufAllocator alloc, Executor delegatedTaskExecutor)	Creates a new SslHandler.
static SslContext	newServerContext(SslProvider provider, File certChainFile, File keyFile)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(SslProvider provider, File certChainFile, File keyFile, String keyPassword)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(SslProvider provider, File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(SslProvider provider, File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, Iterable<String> nextProtocols, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(SslProvider provider, File certChainFile, File keyFile, String keyPassword, TrustManagerFactory trustManagerFactory, Iterable<String> ciphers, Iterable<String> nextProtocols, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(SslProvider provider, File trustCertCollectionFile, TrustManagerFactory trustManagerFactory, File keyCertChainFile, File keyFile, String keyPassword, KeyManagerFactory keyManagerFactory, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(File certChainFile, File keyFile)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(File certChainFile, File keyFile, String keyPassword)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
static SslContext	newServerContext(File certChainFile, File keyFile, String keyPassword, Iterable<String> ciphers, Iterable<String> nextProtocols, long sessionCacheSize, long sessionTimeout)	Deprecated. Replaced by SslContextBuilder
final List<String>	nextProtocols()	Deprecated. Use SslContext.applicationProtocolNegotiator() instead.
long	sessionCacheSize()	Returns the size of the cache used for storing SSL session objects.
long	sessionTimeout()	Returns the timeout for the cached SSL session objects, in seconds.
protected static PrivateKey	toPrivateKey(File keyFile, String keyPassword)
protected static PrivateKey	toPrivateKey(InputStream keyInputStream, String keyPassword)
protected static X509Certificate[]	toX509Certificates(File file)
protected static X509Certificate[]	toX509Certificates(InputStream in)

Methods inherited from class Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 Iterable<String> ciphers,
 ApplicationProtocolConfig apn,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

apn - Provides a means to configure parameters related to application protocol negotiation.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 Iterable<String> ciphers,
 Iterable<String> nextProtocols,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

nextProtocols - the application layer protocols to accept, in the order of preference. null to disable TLS NPN/ALPN extension.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 TrustManagerFactory trustManagerFactory,
 Iterable<String> ciphers,
 ApplicationProtocolConfig config,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

config - Application protocol config.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 TrustManagerFactory trustManagerFactory,
 Iterable<String> ciphers,
 OpenSslApplicationProtocolNegotiator apn,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

apn - Application protocol negotiator.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 Iterable<String> ciphers,
 CipherSuiteFilter cipherFilter,
 ApplicationProtocolConfig apn,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

cipherFilter - a filter to apply over the supplied list of ciphers

apn - Provides a means to configure parameters related to application protocol negotiation.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File trustCertCollectionFile,
 TrustManagerFactory trustManagerFactory,
 File keyCertChainFile,
 File keyFile,
 String keyPassword,
 KeyManagerFactory keyManagerFactory,
 Iterable<String> ciphers,
 CipherSuiteFilter cipherFilter,
 ApplicationProtocolConfig config,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

trustCertCollectionFile - an X.509 certificate collection file in PEM format. This provides the certificate collection used for mutual authentication. null to use the system default

trustManagerFactory - the TrustManagerFactory that provides the TrustManagers that verifies the certificates sent from clients. null to use the default or the results of parsing trustCertCollectionFile.

keyCertChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

keyManagerFactory - the KeyManagerFactory that provides the KeyManagers that is used to encrypt data being sent to clients. null to use the default or the results of parsing keyCertChainFile and keyFile.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

cipherFilter - a filter to apply over the supplied list of ciphers Only required if provider is SslProvider.JDK

config - Provides a means to configure parameters related to application protocol negotiation.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 TrustManagerFactory trustManagerFactory,
 Iterable<String> ciphers,
 CipherSuiteFilter cipherFilter,
 ApplicationProtocolConfig config,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

cipherFilter - a filter to apply over the supplied list of ciphers

config - Application protocol config.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File certChainFile,
 File keyFile,
 String keyPassword,
 TrustManagerFactory trustManagerFactory,
 Iterable<String> ciphers,
 CipherSuiteFilter cipherFilter,
 OpenSslApplicationProtocolNegotiator apn,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder}

Creates a new instance.

Parameters:

certChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

cipherFilter - a filter to apply over the supplied list of ciphers

apn - Application protocol negotiator.

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

OpenSslServerContext

@Deprecated
public OpenSslServerContext(File trustCertCollectionFile,
 TrustManagerFactory trustManagerFactory,
 File keyCertChainFile,
 File keyFile,
 String keyPassword,
 KeyManagerFactory keyManagerFactory,
 Iterable<String> ciphers,
 CipherSuiteFilter cipherFilter,
 OpenSslApplicationProtocolNegotiator apn,
 long sessionCacheSize,
 long sessionTimeout)
                     throws SSLException

Deprecated.

use SslContextBuilder

Creates a new instance.

Parameters:

trustCertCollectionFile - an X.509 certificate collection file in PEM format. This provides the certificate collection used for mutual authentication. null to use the system default

trustManagerFactory - the TrustManagerFactory that provides the TrustManagers that verifies the certificates sent from clients. null to use the default or the results of parsing trustCertCollectionFile.

keyCertChainFile - an X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

keyManagerFactory - the KeyManagerFactory that provides the KeyManagers that is used to encrypt data being sent to clients. null to use the default or the results of parsing keyCertChainFile and keyFile.

ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.

cipherFilter - a filter to apply over the supplied list of ciphers Only required if provider is SslProvider.JDK

apn - Application Protocol Negotiator object

sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.

sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.

Throws:

SSLException

Method Details

sessionContext

public OpenSslServerSessionContext sessionContext()

Description copied from class: SslContext

Returns the SSLSessionContext object held by this context.

Specified by:

sessionContext in class ReferenceCountedOpenSslContext