io.dropwizard.jetty

Class HttpsConnectorFactory

java.lang.Object

io.dropwizard.jetty.HttpConnectorFactory

io.dropwizard.jetty.HttpsConnectorFactory

All Implemented Interfaces:

io.dropwizard.jackson.Discoverable, ConnectorFactory

public class HttpsConnectorFactory
extends HttpConnectorFactory

Builds HTTPS connectors (HTTP over TLS/SSL).

Configuration Parameters:

Name	Default	Description
keyStorePath	REQUIRED	The path to the Java key store which contains the host certificate and private key.
keyStorePassword	REQUIRED	The password used to access the key store.
keyStoreType	JKS	The type of key store (usually JKS, PKCS12, JCEKS, Windows-MY, or Windows-ROOT).
keyStoreProvider	(none)	The JCE provider to use to access the key store.
trustStorePath	(none)	The path to the Java key store which contains the CA certificates used to establish trust.
trustStorePassword	(none)	The password used to access the trust store.
trustStoreType	JKS	The type of trust store (usually JKS, PKCS12, JCEKS, Windows-MY, or Windows-ROOT).
trustStoreProvider	(none)	The JCE provider to use to access the trust store.
keyManagerPassword	(none)	The password, if any, for the key manager.
needClientAuth	(none)	Whether or not client authentication is required.
wantClientAuth	(none)	Whether or not client authentication is requested.
certAlias	(none)	The alias of the certificate to use.
crlPath	(none)	The path to the file which contains the Certificate Revocation List.
enableCRLDP	false	Whether or not CRL Distribution Points (CRLDP) support is enabled.
enableOCSP	false	Whether or not On-Line Certificate Status Protocol (OCSP) support is enabled.
maxCertPathLength	(unlimited)	The maximum certification path length.
ocspResponderUrl	(none)	The location of the OCSP responder.
jceProvider	(none)	The name of the JCE provider to use for cryptographic support.
validateCerts	true	Whether or not to validate TLS certificates before starting. If enabled, Dropwizard will refuse to start with expired or otherwise invalid certificates.
validatePeers	true	Whether or not to validate TLS peer certificates.
supportedProtocols	(none)	A list of protocols (e.g., SSLv3, TLSv1) which are supported. All other protocols will be refused.
excludedProtocols	(none)	A list of protocols (e.g., SSLv3, TLSv1) which are excluded. These protocols will be refused.
supportedCipherSuites	(none)	A list of cipher suites (e.g., TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256) which are supported. All other cipher suites will be refused
excludedCipherSuites	(none)	A list of cipher suites (e.g., TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256) which are excluded. These cipher suites will be refused.
allowRenegotiation	true	Whether or not TLS renegotiation is allowed.
endpointIdentificationAlgorithm	(none)	Which endpoint identification algorithm, if any, to use during the TLS handshake.

For more configuration parameters, see HttpConnectorFactory.

See Also:

HttpConnectorFactory

Constructor Summary

Constructors

Constructor and Description
HttpsConnectorFactory()

Method Summary

Modifier and Type	Method and Description
org.eclipse.jetty.server.Connector	build(org.eclipse.jetty.server.Server server, com.codahale.metrics.MetricRegistry metrics, String name, org.eclipse.jetty.util.thread.ThreadPool threadPool) Create a new connector.
protected org.eclipse.jetty.server.HttpConfiguration	buildHttpConfiguration()
protected org.eclipse.jetty.util.ssl.SslContextFactory	buildSslContextFactory()
boolean	getAllowRenegotiation()
String	getCertAlias()
File	getCrlPath()
Boolean	getEnableCRLDP()
Boolean	getEnableOCSP()
String	getEndpointIdentificationAlgorithm()
List<String>	getExcludedCipherSuites()
List<String>	getExcludedProtocols()
String	getJceProvider()
String	getKeyManagerPassword()
String	getKeyStorePassword()
String	getKeyStorePath()
String	getKeyStoreProvider()
String	getKeyStoreType()
Integer	getMaxCertPathLength()
Boolean	getNeedClientAuth()
URI	getOcspResponderUrl()
List<String>	getSupportedCipherSuites()
List<String>	getSupportedProtocols()
String	getTrustStorePassword()
String	getTrustStorePath()
String	getTrustStoreProvider()
String	getTrustStoreType()
boolean	getValidatePeers()
Boolean	getWantClientAuth()
boolean	isValidateCerts()
boolean	isValidKeyStorePassword()
boolean	isValidKeyStorePath()
protected void	logSupportedParameters()
void	setAllowRenegotiation(boolean allowRenegotiation)
void	setCertAlias(String certAlias)
void	setCrlPath(File crlPath)
void	setEnableCRLDP(Boolean enableCRLDP)
void	setEnableOCSP(Boolean enableOCSP)
void	setEndpointIdentificationAlgorithm(String endpointIdentificationAlgorithm)
void	setExcludedCipherSuites(List<String> excludedCipherSuites)
void	setExcludedProtocols(List<String> excludedProtocols)
void	setJceProvider(String jceProvider)
void	setKeyManagerPassword(String keyManagerPassword)
void	setKeyStorePassword(String keyStorePassword)
void	setKeyStorePath(String keyStorePath)
void	setKeyStoreProvider(String keyStoreProvider)
void	setKeyStoreType(String keyStoreType)
void	setMaxCertPathLength(Integer maxCertPathLength)
void	setNeedClientAuth(Boolean needClientAuth)
void	setOcspResponderUrl(URI ocspResponderUrl)
void	setSupportedCipherSuites(List<String> supportedCipherSuites)
void	setSupportedProtocols(List<String> supportedProtocols)
void	setTrustStorePassword(String trustStorePassword)
void	setTrustStorePath(String trustStorePath)
void	setTrustStoreProvider(String trustStoreProvider)
void	setTrustStoreType(String trustStoreType)
void	setValidateCerts(boolean validateCerts)
void	setValidatePeers(boolean validatePeers)
void	setWantClientAuth(Boolean wantClientAuth)

Methods inherited from class io.dropwizard.jetty.HttpConnectorFactory

admin, application, buildBufferPool, buildConnector, buildHttpConnectionFactory, getAcceptorThreads, getAcceptQueueSize, getBindHost, getBufferPoolIncrement, getHeaderCacheSize, getIdleTimeout, getInputBufferSize, getMaxBufferPoolSize, getMaxRequestHeaderSize, getMaxResponseHeaderSize, getMinBufferPoolSize, getOutputBufferSize, getPort, getSelectorThreads, getSoLingerTime, httpConnections, isReuseAddress, isUseDateHeader, isUseForwardedHeaders, isUseServerHeader, setAcceptorThreads, setAcceptQueueSize, setBindHost, setBufferPoolIncrement, setHeaderCacheSize, setIdleTimeout, setInputBufferSize, setMaxBufferPoolSize, setMaxRequestHeaderSize, setMaxResponseHeaderSize, setMinBufferPoolSize, setOutputBufferSize, setPort, setReuseAddress, setSelectorThreads, setSoLingerTime, setUseDateHeader, setUseForwardedHeaders, setUseServerHeader

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HttpsConnectorFactory

public HttpsConnectorFactory()

Method Detail

getAllowRenegotiation

public boolean getAllowRenegotiation()

setAllowRenegotiation

public void setAllowRenegotiation(boolean allowRenegotiation)

getEndpointIdentificationAlgorithm

public String getEndpointIdentificationAlgorithm()

setEndpointIdentificationAlgorithm

public void setEndpointIdentificationAlgorithm(String endpointIdentificationAlgorithm)

getKeyStorePath

public String getKeyStorePath()

setKeyStorePath

public void setKeyStorePath(String keyStorePath)

getKeyStorePassword

public String getKeyStorePassword()

setKeyStorePassword

public void setKeyStorePassword(String keyStorePassword)

getKeyStoreType

public String getKeyStoreType()

setKeyStoreType

public void setKeyStoreType(String keyStoreType)

getKeyStoreProvider

public String getKeyStoreProvider()

setKeyStoreProvider

public void setKeyStoreProvider(String keyStoreProvider)

getTrustStoreType

public String getTrustStoreType()

setTrustStoreType

public void setTrustStoreType(String trustStoreType)

getTrustStoreProvider

public String getTrustStoreProvider()

setTrustStoreProvider

public void setTrustStoreProvider(String trustStoreProvider)

getKeyManagerPassword

public String getKeyManagerPassword()

setKeyManagerPassword

public void setKeyManagerPassword(String keyManagerPassword)

getTrustStorePath

public String getTrustStorePath()

setTrustStorePath

public void setTrustStorePath(String trustStorePath)

getTrustStorePassword

public String getTrustStorePassword()

setTrustStorePassword

public void setTrustStorePassword(String trustStorePassword)

getNeedClientAuth

public Boolean getNeedClientAuth()

setNeedClientAuth

public void setNeedClientAuth(Boolean needClientAuth)

getWantClientAuth

public Boolean getWantClientAuth()

setWantClientAuth

public void setWantClientAuth(Boolean wantClientAuth)

getCertAlias

public String getCertAlias()

setCertAlias

public void setCertAlias(String certAlias)

getCrlPath

public File getCrlPath()

setCrlPath

public void setCrlPath(File crlPath)

getEnableCRLDP

public Boolean getEnableCRLDP()

setEnableCRLDP

public void setEnableCRLDP(Boolean enableCRLDP)

getEnableOCSP

public Boolean getEnableOCSP()

setEnableOCSP

public void setEnableOCSP(Boolean enableOCSP)

getMaxCertPathLength

public Integer getMaxCertPathLength()

setMaxCertPathLength

public void setMaxCertPathLength(Integer maxCertPathLength)

getOcspResponderUrl

public URI getOcspResponderUrl()

setOcspResponderUrl

public void setOcspResponderUrl(URI ocspResponderUrl)

getJceProvider

public String getJceProvider()

setJceProvider

public void setJceProvider(String jceProvider)

getValidatePeers

public boolean getValidatePeers()

setValidatePeers

public void setValidatePeers(boolean validatePeers)

getSupportedProtocols

public List<String> getSupportedProtocols()

setSupportedProtocols

public void setSupportedProtocols(List<String> supportedProtocols)

getExcludedProtocols

public List<String> getExcludedProtocols()

setExcludedProtocols

public void setExcludedProtocols(List<String> excludedProtocols)

getSupportedCipherSuites

public List<String> getSupportedCipherSuites()

getExcludedCipherSuites

public List<String> getExcludedCipherSuites()

setExcludedCipherSuites

public void setExcludedCipherSuites(List<String> excludedCipherSuites)

setSupportedCipherSuites

public void setSupportedCipherSuites(List<String> supportedCipherSuites)

isValidateCerts

public boolean isValidateCerts()

setValidateCerts

public void setValidateCerts(boolean validateCerts)

isValidKeyStorePath

@ValidationMethod(message="keyStorePath should not be null")
public boolean isValidKeyStorePath()

isValidKeyStorePassword

@ValidationMethod(message="keyStorePassword should not be null or empty")
public boolean isValidKeyStorePassword()

build

public org.eclipse.jetty.server.Connector build(org.eclipse.jetty.server.Server server,
                                                com.codahale.metrics.MetricRegistry metrics,
                                                String name,
                                                org.eclipse.jetty.util.thread.ThreadPool threadPool)

Description copied from interface: ConnectorFactory

Create a new connector.

Specified by:

build in interface ConnectorFactory

Overrides:

build in class HttpConnectorFactory

Parameters:

server - the application's Server instance

metrics - the application's metrics

name - the application's name

threadPool - the application's thread pool

Returns:

a Connector

buildHttpConfiguration

protected org.eclipse.jetty.server.HttpConfiguration buildHttpConfiguration()

Overrides:

buildHttpConfiguration in class HttpConnectorFactory

logSupportedParameters

protected void logSupportedParameters()

buildSslContextFactory

protected org.eclipse.jetty.util.ssl.SslContextFactory buildSslContextFactory()