Package org.infinispan.client.rest.configuration

Class SslConfigurationBuilder

java.lang.Object

org.infinispan.client.rest.configuration.AbstractConfigurationChildBuilder

org.infinispan.client.rest.configuration.AbstractSecurityConfigurationChildBuilder

org.infinispan.client.rest.configuration.SslConfigurationBuilder

All Implemented Interfaces:

RestClientConfigurationChildBuilder, org.infinispan.commons.configuration.Builder<SslConfiguration>

public class SslConfigurationBuilder
extends AbstractSecurityConfigurationChildBuilder
implements org.infinispan.commons.configuration.Builder<SslConfiguration>

SSLConfigurationBuilder.

Since:

10.0

Author:

Tristan Tarrant

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	SslConfigurationBuilder(SecurityConfigurationBuilder builder)

Method Summary

Modifier and Type	Method	Description
org.infinispan.commons.configuration.attributes.AttributeSet	attributes()
SslConfiguration	create()
SslConfigurationBuilder	disable()	Disables the SSL support
SslConfigurationBuilder	enable()	Enables the SSL support
SslConfigurationBuilder	enabled(boolean enabled)	Enables or disables the SSL support
SslConfigurationBuilder	hostnameVerifier(HostnameVerifier hostnameVerifier)	Sets the HostnameVerifier to use when validating certificates against hostnames
SslConfigurationBuilder	keyAlias(String keyAlias)	Sets the alias of the key to use, in case the keyStore contains multiple certificates.
SslConfigurationBuilder	keyStoreCertificatePassword(char[] keyStoreCertificatePassword)	Deprecated. since 9.3
SslConfigurationBuilder	keyStoreFileName(String keyStoreFileName)	Specifies the filename of a keystore to use to create the SSLContext You also need to specify a keyStorePassword(char[]).
SslConfigurationBuilder	keyStorePassword(char[] keyStorePassword)	Specifies the password needed to open the keystore You also need to specify a keyStoreFileName(String).
SslConfigurationBuilder	keyStoreType(String keyStoreType)	Specifies the type of the keystore, such as JKS or JCEKS.
SslConfigurationBuilder	protocol(String protocol)	Configures the secure socket protocol.
SslConfigurationBuilder	provider(String provider)	Configures the security provider to use when initializing TLS.
SslConfigurationBuilder	read(SslConfiguration template)
SslConfigurationBuilder	sniHostName(String sniHostName)	Specifies the TLS SNI hostname for the connection
SslConfigurationBuilder	sslContext(SSLContext sslContext)	Sets an SSLContext
SslConfigurationBuilder	trustManagers(TrustManager[] trustManagers)	Sets the TrustManagers used to create the SSLContextt
SslConfigurationBuilder	trustStoreFileName(String trustStoreFileName)	Specifies the filename of a truststore to use to create the SSLContext You also need to specify a trustStorePassword(char[]).
SslConfigurationBuilder	trustStorePassword(char[] trustStorePassword)	Specifies the password needed to open the truststore You also need to specify a trustStoreFileName(String).
SslConfigurationBuilder	trustStorePath(String trustStorePath)	Specifies a path containing certificates in PEM format.
SslConfigurationBuilder	trustStoreType(String trustStoreType)	Specifies the type of the truststore, such as JKS or JCEKS.
void	validate()
RestClientConfigurationBuilder	withProperties(Properties properties)	Configures this builder using the specified properties.

Methods inherited from class org.infinispan.client.rest.configuration.AbstractSecurityConfigurationChildBuilder

authentication, ssl

Methods inherited from class org.infinispan.client.rest.configuration.AbstractConfigurationChildBuilder

addServer, addServers, build, connectionTimeout, followRedirects, priorKnowledge, protocol, security, socketTimeout, tcpKeepAlive, tcpNoDelay

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SslConfigurationBuilder

protected SslConfigurationBuilder(SecurityConfigurationBuilder builder)

Method Details

attributes

public org.infinispan.commons.configuration.attributes.AttributeSet attributes()

Specified by:

attributes in interface org.infinispan.commons.configuration.Builder<SslConfiguration>

disable

public SslConfigurationBuilder disable()

Disables the SSL support

enable

public SslConfigurationBuilder enable()

Enables the SSL support

enabled

public SslConfigurationBuilder enabled(boolean enabled)

Enables or disables the SSL support

keyStoreFileName

public SslConfigurationBuilder keyStoreFileName(String keyStoreFileName)

Specifies the filename of a keystore to use to create the SSLContext You also need to specify a keyStorePassword(char[]). Alternatively specify an initialized sslContext(SSLContext). Setting this property also implicitly enables SSL/TLS (see enable()

keyStoreType

public SslConfigurationBuilder keyStoreType(String keyStoreType)

Specifies the type of the keystore, such as JKS or JCEKS. Defaults to JKS. Setting this property also implicitly enables SSL/TLS (see enable()

keyStorePassword

public SslConfigurationBuilder keyStorePassword(char[] keyStorePassword)

Specifies the password needed to open the keystore You also need to specify a keyStoreFileName(String). Alternatively specify an initialized sslContext(SSLContext). Setting this property also implicitly enables SSL/TLS (see enable()

keyStoreCertificatePassword

@Deprecated
public SslConfigurationBuilder keyStoreCertificatePassword(char[] keyStoreCertificatePassword)

Deprecated.

since 9.3

Specifies the password needed to access private key associated with certificate stored in specified keyStoreFileName(String). If password is not specified, password provided in keyStorePassword(char[]) will be used. Setting this property also implicitly enables SSL/TLS (see enable()
Note: this only works with some keystore types

keyAlias

public SslConfigurationBuilder keyAlias(String keyAlias)

Sets the alias of the key to use, in case the keyStore contains multiple certificates. Setting this property also implicitly enables SSL/TLS (see enable()

sslContext

public SslConfigurationBuilder sslContext(SSLContext sslContext)

Sets an SSLContext

trustManagers

public SslConfigurationBuilder trustManagers(TrustManager[] trustManagers)

Sets the TrustManagers used to create the SSLContextt

hostnameVerifier

public SslConfigurationBuilder hostnameVerifier(HostnameVerifier hostnameVerifier)

Sets the HostnameVerifier to use when validating certificates against hostnames

trustStoreFileName

public SslConfigurationBuilder trustStoreFileName(String trustStoreFileName)

Specifies the filename of a truststore to use to create the SSLContext You also need to specify a trustStorePassword(char[]). Alternatively specify an initialized sslContext(SSLContext). Setting this property also implicitly enables SSL/TLS (see enable()

trustStorePath

public SslConfigurationBuilder trustStorePath(String trustStorePath)

Specifies a path containing certificates in PEM format. An in-memory KeyStore will be built with all the certificates found undert that path. This is mutually exclusive with trustStoreFileName Setting this property also implicitly enables SSL/TLS (see enable()

trustStoreType

public SslConfigurationBuilder trustStoreType(String trustStoreType)

Specifies the type of the truststore, such as JKS or JCEKS. Defaults to JKS. Setting this property also implicitly enables SSL/TLS (see enable()

trustStorePassword

public SslConfigurationBuilder trustStorePassword(char[] trustStorePassword)

Specifies the password needed to open the truststore You also need to specify a trustStoreFileName(String). Alternatively specify an initialized sslContext(SSLContext). Setting this property also implicitly enables SSL/TLS (see enable()

sniHostName

public SslConfigurationBuilder sniHostName(String sniHostName)

Specifies the TLS SNI hostname for the connection

protocol

public SslConfigurationBuilder protocol(String protocol)

Configures the secure socket protocol. Setting this property also implicitly enables SSL/TLS (see enable()

Parameters:

protocol - The standard name of the requested protocol, e.g TLSv1.2

See Also:

• SSLContext.getInstance(String)

provider

public SslConfigurationBuilder provider(String provider)

Configures the security provider to use when initializing TLS. Setting this property also implicitly enables SSL/TLS (see enable()

Parameters:

provider - The name of a security provider

See Also:

• SSLContext.getInstance(String)

validate

public void validate()

Specified by:

validate in interface org.infinispan.commons.configuration.Builder<SslConfiguration>

create

public SslConfiguration create()

Specified by:

create in interface org.infinispan.commons.configuration.Builder<SslConfiguration>

read

public SslConfigurationBuilder read(SslConfiguration template)

Specified by:

read in interface org.infinispan.commons.configuration.Builder<SslConfiguration>

withProperties

public RestClientConfigurationBuilder withProperties(Properties properties)

Description copied from interface: RestClientConfigurationChildBuilder

Configures this builder using the specified properties. See RestClientConfigurationBuilder for a list.

Specified by:

withProperties in interface RestClientConfigurationChildBuilder

Overrides:

withProperties in class AbstractConfigurationChildBuilder