Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- ALIAS - Static variable in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
B
- build() - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Creates a random generator using the settings from this builder.
C
- chooseClientAlias(String[], Principal[], Socket) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- chooseEngineClientAlias(String[], Principal[], SSLEngine) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- chooseEngineServerAlias(String, Principal[], SSLEngine) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- chooseServerAlias(String, Principal[], Socket) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- CipherSuites - Class in com.netflix.spinnaker.kork.crypto
-
Provides a common source for lists of TLS cipher suite baselines.
- CipherSuites() - Constructor for class com.netflix.spinnaker.kork.crypto.CipherSuites
- com.netflix.spinnaker.kork.crypto - package com.netflix.spinnaker.kork.crypto
- create() - Static method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Creates a new builder for
SecureRandominstances. - createSSLContext() - Method in interface com.netflix.spinnaker.kork.crypto.X509Identity
- createSSLContext(X509TrustManager) - Method in interface com.netflix.spinnaker.kork.crypto.X509Identity
-
Creates an
SSLContextfrom this identity using a specific trust manager. - createSSLContext(X509TrustManager, SecureRandom) - Method in interface com.netflix.spinnaker.kork.crypto.X509Identity
-
Creates an
SSLContextfrom this identity using a specific trust manager and source of randomness.
D
- destroy() - Method in class com.netflix.spinnaker.kork.crypto.StaticX509Identity
F
- freshTarget() - Method in class com.netflix.spinnaker.kork.crypto.RefreshableX509Identity
- fromKeyStore(Path, String, PasswordProvider) - Static method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Creates an identity source from a password-protected
KeyStorefile. - fromKeyStore(Path, String, PasswordProvider, PasswordProvider) - Static method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Creates an identity source from a password-protected
KeyStorefile. - fromPEM(Path, Path) - Static method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Creates an identity source from a PEM-encoded private key file and certificate file.
- fromPKCS12(Path, PasswordProvider) - Static method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Creates an identity source from a PKCS#12-encoded keystore file and password provider function.
- fromPKCS12(Path, PasswordProvider, PasswordProvider) - Static method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Creates an identity source from a PKCS#12-encoded keystore file, keystore password provider function, and identity private key password provider function.
G
- generateAlias(Certificate) - Static method in interface com.netflix.spinnaker.kork.crypto.X509Identity
-
Generates a certificate alias string.
- getCertificateChain() - Method in class com.netflix.spinnaker.kork.crypto.StaticX509Identity
- getCertificateChain() - Method in interface com.netflix.spinnaker.kork.crypto.X509Identity
-
Returns the certificate chain for this identity.
- getCertificateChain(String) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- getClientAliases(String, Principal[]) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- getExpiresAt() - Method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Returns the earliest date and time of expiration of the certificates included in this source.
- getIntermediateCompatibilityCiphers() - Static method in class com.netflix.spinnaker.kork.crypto.CipherSuites
- getKeyFactory(ASN1ObjectIdentifier) - Static method in class com.netflix.spinnaker.kork.crypto.KeyFactories
- getLastLoaded() - Method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Returns the time this source last loaded an identity.
- getLastModified() - Method in class com.netflix.spinnaker.kork.crypto.PasswordProtectedKeyStoreIdentitySource
- getLastModified() - Method in class com.netflix.spinnaker.kork.crypto.PEMIdentitySource
- getLastModified() - Method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Returns the time that the key or certificate source was last modified.
- getPKCS12KeyStore() - Static method in class com.netflix.spinnaker.kork.crypto.StandardCrypto
- getPKIXTrustManagerFactory() - Static method in class com.netflix.spinnaker.kork.crypto.StandardCrypto
- getPrivateCredential() - Method in interface com.netflix.spinnaker.kork.crypto.X509Identity
-
Returns the private key and certificate for this identity.
- getPrivateKey(String) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- getRecommendedCiphers() - Static method in class com.netflix.spinnaker.kork.crypto.CipherSuites
- getRequiredCiphers() - Static method in class com.netflix.spinnaker.kork.crypto.CipherSuites
-
Returns the list of baseline ciphers that should be enabled for TLS.
- getServerAliases(String, Principal[]) - Method in class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- getSystemTrustManager() - Static method in class com.netflix.spinnaker.kork.crypto.TrustStores
- getTLSContext() - Static method in class com.netflix.spinnaker.kork.crypto.StandardCrypto
- getX509CertificateFactory() - Static method in class com.netflix.spinnaker.kork.crypto.StandardCrypto
I
- IdentityX509KeyManager - Class in com.netflix.spinnaker.kork.crypto
-
Provides a simple
X509ExtendedKeyManagerthat uses a singleX509Identityas the source for any keys and certificates required. - IdentityX509KeyManager() - Constructor for class com.netflix.spinnaker.kork.crypto.IdentityX509KeyManager
- isDestroyed() - Method in class com.netflix.spinnaker.kork.crypto.StaticX509Identity
K
- KeyFactories - Class in com.netflix.spinnaker.kork.crypto
L
- load() - Method in class com.netflix.spinnaker.kork.crypto.PasswordProtectedKeyStoreIdentitySource
- load() - Method in class com.netflix.spinnaker.kork.crypto.PEMIdentitySource
- load() - Method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Loads an
X509Identityfrom this underlying source. - loadPEM(Path) - Static method in class com.netflix.spinnaker.kork.crypto.TrustStores
- loadTrustManager(KeyStore) - Static method in class com.netflix.spinnaker.kork.crypto.TrustStores
N
- NestedSecurityIOException - Exception in com.netflix.spinnaker.kork.crypto
- NestedSecurityIOException(GeneralSecurityException) - Constructor for exception com.netflix.spinnaker.kork.crypto.NestedSecurityIOException
- NestedSecurityRuntimeException - Exception in com.netflix.spinnaker.kork.crypto
- NestedSecurityRuntimeException(GeneralSecurityException) - Constructor for exception com.netflix.spinnaker.kork.crypto.NestedSecurityRuntimeException
P
- password() - Method in interface com.netflix.spinnaker.kork.crypto.PasswordProvider
- PasswordProtectedKeyStoreIdentitySource - Class in com.netflix.spinnaker.kork.crypto
-
Identity source using a keystore file and password provider functions for the keystore and identity private key.
- PasswordProtectedKeyStoreIdentitySource() - Constructor for class com.netflix.spinnaker.kork.crypto.PasswordProtectedKeyStoreIdentitySource
- PasswordProvider - Interface in com.netflix.spinnaker.kork.crypto
-
Function for providing a password for use with decrypting keystores.
- PEMIdentitySource - Class in com.netflix.spinnaker.kork.crypto
-
Implements an identity source based on a PEM-encoded private key and certificate file.
- PEMIdentitySource() - Constructor for class com.netflix.spinnaker.kork.crypto.PEMIdentitySource
R
- refreshable(Duration) - Method in interface com.netflix.spinnaker.kork.crypto.X509IdentitySource
-
Creates a refreshable
X509Identityfrom this source and the given refresh check delay. - RefreshableX509Identity - Class in com.netflix.spinnaker.kork.crypto
-
Implements a refreshable
X509Identityusing Spring AOP. - RefreshableX509Identity() - Constructor for class com.netflix.spinnaker.kork.crypto.RefreshableX509Identity
- requiresRefresh() - Method in class com.netflix.spinnaker.kork.crypto.RefreshableX509Identity
S
- SecureRandomBuilder - Class in com.netflix.spinnaker.kork.crypto
-
Builder class for creating a
SecureRandominstance using a deterministic random bit generator (DRBG). - SecureRandomBuilder() - Constructor for class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
- StandardCrypto - Class in com.netflix.spinnaker.kork.crypto
-
Provides simpler access to standard Java cryptography algorithm classes.
- StaticX509Identity - Class in com.netflix.spinnaker.kork.crypto
-
Provides a static implementation of an
X509Identity. - StaticX509Identity(PrivateKey, X509Certificate[]) - Constructor for class com.netflix.spinnaker.kork.crypto.StaticX509Identity
T
- TrustStores - Class in com.netflix.spinnaker.kork.crypto
-
Provides utility methods related to trust stores.
W
- withAlgorithm(String) - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Overrides the algorithm name to use.
- withPersonalizationString(byte[]) - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Specifies a personalization string to use during instantiation of the random generator.
- withPersonalizationString(String) - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Specifies a personalization string which is converted to UTF-8.
- withPredictionResistance() - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Enables support for prediction resistance (and by extension, reseeding).
- withProvider(String) - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Specifies a particular security provider name to use.
- withProvider(Provider) - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Specifies a particular security provider to use.
- withReseedSupport() - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Enables support for
SecureRandom.reseed()andSecureRandom.reseed(SecureRandomParameters). - withStrength(int) - Method in class com.netflix.spinnaker.kork.crypto.SecureRandomBuilder
-
Specifies the required security strength in bits for the built random generator.
X
- X509Identity - Interface in com.netflix.spinnaker.kork.crypto
-
Represents a cryptographic identity using a private key and certificate.
- X509IdentitySource - Interface in com.netflix.spinnaker.kork.crypto
-
Provides a source for loading an
X509Identityfrom some underlying key and certificate.
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form