com.floragunn.searchguard.ssl.util

Class SSLConfigConstants

java.lang.Object

com.floragunn.searchguard.ssl.util.SSLConfigConstants

public final class SSLConfigConstants
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static String	DEFAULT_STORE_PASSWORD
static String	JDK_TLS_REJECT_CLIENT_INITIATED_RENEGOTIATION
static String	SEARCHGUARD_SSL_ALLOW_CLIENT_INITIATED_RENEGOTIATION
static String	SEARCHGUARD_SSL_CLIENT_EXTERNAL_CONTEXT_ID
static String	SEARCHGUARD_SSL_HTTP_CLIENTAUTH_MODE
static String	SEARCHGUARD_SSL_HTTP_CRL_CHECK_ONLY_END_ENTITIES
static String	SEARCHGUARD_SSL_HTTP_CRL_DISABLE_CRLDP
static String	SEARCHGUARD_SSL_HTTP_CRL_DISABLE_OCSP
static String	SEARCHGUARD_SSL_HTTP_CRL_FILE
static String	SEARCHGUARD_SSL_HTTP_CRL_PREFER_CRLFILE_OVER_OCSP
static String	SEARCHGUARD_SSL_HTTP_CRL_VALIDATE
static String	SEARCHGUARD_SSL_HTTP_CRL_VALIDATION_DATE
static String	SEARCHGUARD_SSL_HTTP_ENABLE_OPENSSL_IF_AVAILABLE
static String	SEARCHGUARD_SSL_HTTP_ENABLED
static String	SEARCHGUARD_SSL_HTTP_ENABLED_CIPHERS
static boolean	SEARCHGUARD_SSL_HTTP_ENABLED_DEFAULT
static String	SEARCHGUARD_SSL_HTTP_ENABLED_PROTOCOLS
static String	SEARCHGUARD_SSL_HTTP_KEYSTORE_ALIAS
static String	SEARCHGUARD_SSL_HTTP_KEYSTORE_FILEPATH
static String	SEARCHGUARD_SSL_HTTP_KEYSTORE_PASSWORD
static String	SEARCHGUARD_SSL_HTTP_KEYSTORE_TYPE
static String	SEARCHGUARD_SSL_HTTP_PEMCERT_FILEPATH
static String	SEARCHGUARD_SSL_HTTP_PEMKEY_FILEPATH
static String	SEARCHGUARD_SSL_HTTP_PEMKEY_PASSWORD
static String	SEARCHGUARD_SSL_HTTP_PEMTRUSTEDCAS_FILEPATH
static String	SEARCHGUARD_SSL_HTTP_TRUSTSTORE_ALIAS
static String	SEARCHGUARD_SSL_HTTP_TRUSTSTORE_FILEPATH
static String	SEARCHGUARD_SSL_HTTP_TRUSTSTORE_PASSWORD
static String	SEARCHGUARD_SSL_HTTP_TRUSTSTORE_TYPE
static String	SEARCHGUARD_SSL_TRANSPORT_ENABLE_OPENSSL_IF_AVAILABLE
static String	SEARCHGUARD_SSL_TRANSPORT_ENABLED
static String	SEARCHGUARD_SSL_TRANSPORT_ENABLED_CIPHERS
static boolean	SEARCHGUARD_SSL_TRANSPORT_ENABLED_DEFAULT
static String	SEARCHGUARD_SSL_TRANSPORT_ENABLED_PROTOCOLS
static String	SEARCHGUARD_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION
static String	SEARCHGUARD_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION_RESOLVE_HOST_NAME
static String	SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_ALIAS
static String	SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_FILEPATH
static String	SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_PASSWORD
static String	SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_TYPE
static String	SEARCHGUARD_SSL_TRANSPORT_PEMCERT_FILEPATH
static String	SEARCHGUARD_SSL_TRANSPORT_PEMKEY_FILEPATH
static String	SEARCHGUARD_SSL_TRANSPORT_PEMKEY_PASSWORD
static String	SEARCHGUARD_SSL_TRANSPORT_PEMTRUSTEDCAS_FILEPATH
static String	SEARCHGUARD_SSL_TRANSPORT_PRINCIPAL_EXTRACTOR_CLASS
static String	SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_ALIAS
static String	SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_FILEPATH
static String	SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_PASSWORD
static String	SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_TYPE

Method Summary

Modifier and Type	Method and Description
static List<String>	getSecureSSLCiphers(org.elasticsearch.common.settings.Settings settings, boolean http)
static String[]	getSecureSSLProtocols(org.elasticsearch.common.settings.Settings settings, boolean http)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SEARCHGUARD_SSL_HTTP_ENABLE_OPENSSL_IF_AVAILABLE

public static final String SEARCHGUARD_SSL_HTTP_ENABLE_OPENSSL_IF_AVAILABLE

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_ENABLED

public static final String SEARCHGUARD_SSL_HTTP_ENABLED

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_ENABLED_DEFAULT

public static final boolean SEARCHGUARD_SSL_HTTP_ENABLED_DEFAULT

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CLIENTAUTH_MODE

public static final String SEARCHGUARD_SSL_HTTP_CLIENTAUTH_MODE

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_KEYSTORE_ALIAS

public static final String SEARCHGUARD_SSL_HTTP_KEYSTORE_ALIAS

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_KEYSTORE_FILEPATH

public static final String SEARCHGUARD_SSL_HTTP_KEYSTORE_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_PEMKEY_FILEPATH

public static final String SEARCHGUARD_SSL_HTTP_PEMKEY_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_PEMKEY_PASSWORD

public static final String SEARCHGUARD_SSL_HTTP_PEMKEY_PASSWORD

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_PEMCERT_FILEPATH

public static final String SEARCHGUARD_SSL_HTTP_PEMCERT_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_PEMTRUSTEDCAS_FILEPATH

public static final String SEARCHGUARD_SSL_HTTP_PEMTRUSTEDCAS_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_KEYSTORE_PASSWORD

public static final String SEARCHGUARD_SSL_HTTP_KEYSTORE_PASSWORD

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_KEYSTORE_TYPE

public static final String SEARCHGUARD_SSL_HTTP_KEYSTORE_TYPE

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_TRUSTSTORE_ALIAS

public static final String SEARCHGUARD_SSL_HTTP_TRUSTSTORE_ALIAS

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_TRUSTSTORE_FILEPATH

public static final String SEARCHGUARD_SSL_HTTP_TRUSTSTORE_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_TRUSTSTORE_PASSWORD

public static final String SEARCHGUARD_SSL_HTTP_TRUSTSTORE_PASSWORD

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_TRUSTSTORE_TYPE

public static final String SEARCHGUARD_SSL_HTTP_TRUSTSTORE_TYPE

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENABLE_OPENSSL_IF_AVAILABLE

public static final String SEARCHGUARD_SSL_TRANSPORT_ENABLE_OPENSSL_IF_AVAILABLE

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENABLED

public static final String SEARCHGUARD_SSL_TRANSPORT_ENABLED

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENABLED_DEFAULT

public static final boolean SEARCHGUARD_SSL_TRANSPORT_ENABLED_DEFAULT

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION

public static final String SEARCHGUARD_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION_RESOLVE_HOST_NAME

public static final String SEARCHGUARD_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION_RESOLVE_HOST_NAME

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_ALIAS

public static final String SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_ALIAS

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_FILEPATH

public static final String SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_PEMKEY_FILEPATH

public static final String SEARCHGUARD_SSL_TRANSPORT_PEMKEY_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_PEMKEY_PASSWORD

public static final String SEARCHGUARD_SSL_TRANSPORT_PEMKEY_PASSWORD

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_PEMCERT_FILEPATH

public static final String SEARCHGUARD_SSL_TRANSPORT_PEMCERT_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_PEMTRUSTEDCAS_FILEPATH

public static final String SEARCHGUARD_SSL_TRANSPORT_PEMTRUSTEDCAS_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_PASSWORD

public static final String SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_PASSWORD

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_TYPE

public static final String SEARCHGUARD_SSL_TRANSPORT_KEYSTORE_TYPE

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_ALIAS

public static final String SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_ALIAS

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_FILEPATH

public static final String SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_FILEPATH

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_PASSWORD

public static final String SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_PASSWORD

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_TYPE

public static final String SEARCHGUARD_SSL_TRANSPORT_TRUSTSTORE_TYPE

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENABLED_CIPHERS

public static final String SEARCHGUARD_SSL_TRANSPORT_ENABLED_CIPHERS

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_ENABLED_PROTOCOLS

public static final String SEARCHGUARD_SSL_TRANSPORT_ENABLED_PROTOCOLS

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_ENABLED_CIPHERS

public static final String SEARCHGUARD_SSL_HTTP_ENABLED_CIPHERS

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_ENABLED_PROTOCOLS

public static final String SEARCHGUARD_SSL_HTTP_ENABLED_PROTOCOLS

See Also:

Constant Field Values

SEARCHGUARD_SSL_CLIENT_EXTERNAL_CONTEXT_ID

public static final String SEARCHGUARD_SSL_CLIENT_EXTERNAL_CONTEXT_ID

See Also:

Constant Field Values

SEARCHGUARD_SSL_TRANSPORT_PRINCIPAL_EXTRACTOR_CLASS

public static final String SEARCHGUARD_SSL_TRANSPORT_PRINCIPAL_EXTRACTOR_CLASS

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_FILE

public static final String SEARCHGUARD_SSL_HTTP_CRL_FILE

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_VALIDATE

public static final String SEARCHGUARD_SSL_HTTP_CRL_VALIDATE

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_PREFER_CRLFILE_OVER_OCSP

public static final String SEARCHGUARD_SSL_HTTP_CRL_PREFER_CRLFILE_OVER_OCSP

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_CHECK_ONLY_END_ENTITIES

public static final String SEARCHGUARD_SSL_HTTP_CRL_CHECK_ONLY_END_ENTITIES

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_DISABLE_OCSP

public static final String SEARCHGUARD_SSL_HTTP_CRL_DISABLE_OCSP

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_DISABLE_CRLDP

public static final String SEARCHGUARD_SSL_HTTP_CRL_DISABLE_CRLDP

See Also:

Constant Field Values

SEARCHGUARD_SSL_HTTP_CRL_VALIDATION_DATE

public static final String SEARCHGUARD_SSL_HTTP_CRL_VALIDATION_DATE

See Also:

Constant Field Values

SEARCHGUARD_SSL_ALLOW_CLIENT_INITIATED_RENEGOTIATION

public static final String SEARCHGUARD_SSL_ALLOW_CLIENT_INITIATED_RENEGOTIATION

See Also:

Constant Field Values

DEFAULT_STORE_PASSWORD

public static final String DEFAULT_STORE_PASSWORD

See Also:

Constant Field Values

JDK_TLS_REJECT_CLIENT_INITIATED_RENEGOTIATION

public static final String JDK_TLS_REJECT_CLIENT_INITIATED_RENEGOTIATION

See Also:

Constant Field Values

Method Detail

getSecureSSLProtocols

public static final String[] getSecureSSLProtocols(org.elasticsearch.common.settings.Settings settings,
                                                   boolean http)

getSecureSSLCiphers

public static final List<String> getSecureSSLCiphers(org.elasticsearch.common.settings.Settings settings,
                                                     boolean http)