org.eclipse.jetty.util.ssl

Class SniX509ExtendedKeyManager

java.lang.Object

javax.net.ssl.X509ExtendedKeyManager

org.eclipse.jetty.util.ssl.SniX509ExtendedKeyManager

All Implemented Interfaces:

KeyManager, X509KeyManager

public class SniX509ExtendedKeyManager
extends X509ExtendedKeyManager

A X509ExtendedKeyManager that selects a key with an alias retrieved from SNI information, delegating other processing to a nested X509ExtendedKeyManager.

Can only be used on server side.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static interface	SniX509ExtendedKeyManager.SniSelector Selects a certificate based on SNI information.

Field Summary

Fields

Modifier and Type	Field and Description
static String	SNI_X509

Constructor Summary

Constructors

Constructor and Description
SniX509ExtendedKeyManager(X509ExtendedKeyManager keyManager) Deprecated. not supported, you must have a SslContextFactory.Server for this to work.
SniX509ExtendedKeyManager(X509ExtendedKeyManager keyManager, SslContextFactory.Server sslContextFactory)

Method Summary

Modifier and Type	Method and Description
String	chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)
String	chooseEngineClientAlias(String[] keyType, Principal[] issuers, SSLEngine engine)
String	chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)
String	chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
X509Certificate[]	getCertificateChain(String alias)
String[]	getClientAliases(String keyType, Principal[] issuers)
PrivateKey	getPrivateKey(String alias)
String[]	getServerAliases(String keyType, Principal[] issuers)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SNI_X509

public static final String SNI_X509

See Also:

Constant Field Values

Constructor Detail

SniX509ExtendedKeyManager

@Deprecated
public SniX509ExtendedKeyManager(X509ExtendedKeyManager keyManager)

Deprecated. not supported, you must have a SslContextFactory.Server for this to work.

SniX509ExtendedKeyManager

public SniX509ExtendedKeyManager(X509ExtendedKeyManager keyManager,
                                 SslContextFactory.Server sslContextFactory)

Method Detail

chooseClientAlias

public String chooseClientAlias(String[] keyType,
                                Principal[] issuers,
                                Socket socket)

chooseEngineClientAlias

public String chooseEngineClientAlias(String[] keyType,
                                      Principal[] issuers,
                                      SSLEngine engine)

Overrides:

chooseEngineClientAlias in class X509ExtendedKeyManager

chooseServerAlias

public String chooseServerAlias(String keyType,
                                Principal[] issuers,
                                Socket socket)

chooseEngineServerAlias

public String chooseEngineServerAlias(String keyType,
                                      Principal[] issuers,
                                      SSLEngine engine)

Overrides:

chooseEngineServerAlias in class X509ExtendedKeyManager

getCertificateChain

public X509Certificate[] getCertificateChain(String alias)

getClientAliases

public String[] getClientAliases(String keyType,
                                 Principal[] issuers)

getPrivateKey

public PrivateKey getPrivateKey(String alias)

getServerAliases

public String[] getServerAliases(String keyType,
                                 Principal[] issuers)