Package org.elasticsearch.common.ssl

Class SslConfiguration

java.lang.Object

org.elasticsearch.common.ssl.SslConfiguration

public class SslConfiguration
extends Object

A object encapsulating all necessary configuration for an SSL context (client or server). The configuration itself is immutable, but the key config and trust config may depend on reading key and certificate material from files (see getDependentFiles(), and the content of those files may change.

Constructor Summary

Constructors

Constructor	Description
SslConfiguration(SslTrustConfig trustConfig, SslKeyConfig keyConfig, SslVerificationMode verificationMode, SslClientAuthenticationMode clientAuth, List<String> ciphers, List<String> supportedProtocols)

Method Summary

Modifier and Type	Method	Description
SSLContext	createSslContext()	Dynamically create a new SSL context based on the current state of the configuration.
boolean	equals(Object o)
List<String>	getCipherSuites()
SslClientAuthenticationMode	getClientAuth()
Collection<Path>	getDependentFiles()
SslKeyConfig	getKeyConfig()
List<String>	getSupportedProtocols()
SslTrustConfig	getTrustConfig()
SslVerificationMode	getVerificationMode()
int	hashCode()
String	toString()

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

SslConfiguration

public SslConfiguration(SslTrustConfig trustConfig,
 SslKeyConfig keyConfig,
 SslVerificationMode verificationMode,
 SslClientAuthenticationMode clientAuth,
 List<String> ciphers,
 List<String> supportedProtocols)

Method Details

getTrustConfig

public SslTrustConfig getTrustConfig()

getKeyConfig

public SslKeyConfig getKeyConfig()

getVerificationMode

public SslVerificationMode getVerificationMode()

getClientAuth

public SslClientAuthenticationMode getClientAuth()

getCipherSuites

public List<String> getCipherSuites()

getSupportedProtocols

public List<String> getSupportedProtocols()

getDependentFiles

public Collection<Path> getDependentFiles()

Returns:

A collection of files that are used by this SSL configuration. If the contents of these files change, then any subsequent call to createSslContext() (or similar methods) may create a context with different behaviour. It is recommended that these files be monitored for changes, and a new ssl-context is created whenever any of the files are modified.

createSslContext

public SSLContext createSslContext()

Dynamically create a new SSL context based on the current state of the configuration. Because the key config and trust config may change based on the contents of their referenced files (see getDependentFiles(), consecutive calls to this method may return ssl-contexts with different configurations.

toString

public String toString()

Overrides:

toString in class Object

equals

public boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public int hashCode()

Overrides:

hashCode in class Object