io.netty.handler.ssl

类 JdkSslContext

java.lang.Object

io.netty.handler.ssl.SslContext

io.netty.handler.ssl.JdkSslContext

直接已知子类:

JdkSslClientContext, JdkSslServerContext

public class JdkSslContext
extends SslContext

An SslContext which uses JDK's SSL/TLS implementation.

构造器概要

构造器

构造器和说明
JdkSslContext(javax.net.ssl.SSLContext sslContext, boolean isClient, ClientAuth clientAuth) Creates a new JdkSslContext from a pre-configured SSLContext.
JdkSslContext(javax.net.ssl.SSLContext sslContext, boolean isClient, java.lang.Iterable<java.lang.String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, ClientAuth clientAuth) Creates a new JdkSslContext from a pre-configured SSLContext.

方法概要

方法

限定符和类型	方法和说明
JdkApplicationProtocolNegotiator	applicationProtocolNegotiator() Returns the object responsible for negotiating application layer protocols for the TLS NPN/ALPN extensions.
protected static javax.net.ssl.KeyManagerFactory	buildKeyManagerFactory(java.io.File certChainFile, java.io.File keyFile, java.lang.String keyPassword, javax.net.ssl.KeyManagerFactory kmf) 已过时。 will be removed.
protected static javax.net.ssl.KeyManagerFactory	buildKeyManagerFactory(java.io.File certChainFile, java.lang.String keyAlgorithm, java.io.File keyFile, java.lang.String keyPassword, javax.net.ssl.KeyManagerFactory kmf) 已过时。 will be removed.
java.util.List<java.lang.String>	cipherSuites() Returns the list of enabled cipher suites, in the order of preference.
javax.net.ssl.SSLContext	context() Returns the JDK SSLContext object held by this context.
boolean	isClient() Returns the true if and only if this context is for client-side.
javax.net.ssl.SSLEngine	newEngine(ByteBufAllocator alloc) Creates a new SSLEngine.
javax.net.ssl.SSLEngine	newEngine(ByteBufAllocator alloc, java.lang.String peerHost, int peerPort) Creates a new SSLEngine using advisory peer information.
long	sessionCacheSize() Returns the size of the cache used for storing SSL session objects.
javax.net.ssl.SSLSessionContext	sessionContext() Returns the JDK SSLSessionContext object held by this context.
long	sessionTimeout() Returns the timeout for the cached SSL session objects, in seconds.

从类继承的方法 io.netty.handler.ssl.SslContext

buildTrustManagerFactory, defaultClientProvider, defaultServerProvider, generateKeySpec, isServer, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newHandler, newHandler, newHandler, newHandler, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, nextProtocols

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

JdkSslContext

public JdkSslContext(javax.net.ssl.SSLContext sslContext,
             boolean isClient,
             ClientAuth clientAuth)

Creates a new JdkSslContext from a pre-configured SSLContext.

参数:

sslContext - the SSLContext to use.

isClient - true if this context should create SSLEngines for client-side usage.

clientAuth - the ClientAuth to use. This will only be used when is false.

JdkSslContext

public JdkSslContext(javax.net.ssl.SSLContext sslContext,
             boolean isClient,
             java.lang.Iterable<java.lang.String> ciphers,
             CipherSuiteFilter cipherFilter,
             ApplicationProtocolConfig apn,
             ClientAuth clientAuth)

Creates a new JdkSslContext from a pre-configured SSLContext.

参数:

sslContext - the SSLContext to use.

isClient - true if this context should create SSLEngines for client-side usage.

ciphers - the ciphers to use or null if the standard should be used.

cipherFilter - the filter to use.

apn - the ApplicationProtocolConfig to use.

clientAuth - the ClientAuth to use. This will only be used when is false.

方法详细资料

context

public final javax.net.ssl.SSLContext context()

Returns the JDK SSLContext object held by this context.

isClient

public final boolean isClient()

从类复制的说明: SslContext

Returns the true if and only if this context is for client-side.

指定者:

isClient 在类中 SslContext

sessionContext

public final javax.net.ssl.SSLSessionContext sessionContext()

Returns the JDK SSLSessionContext object held by this context.

指定者:

sessionContext 在类中 SslContext

cipherSuites

public final java.util.List<java.lang.String> cipherSuites()

从类复制的说明: SslContext

Returns the list of enabled cipher suites, in the order of preference.

指定者:

cipherSuites 在类中 SslContext

sessionCacheSize

public final long sessionCacheSize()

从类复制的说明: SslContext

Returns the size of the cache used for storing SSL session objects.

指定者:

sessionCacheSize 在类中 SslContext

sessionTimeout

public final long sessionTimeout()

从类复制的说明: SslContext

Returns the timeout for the cached SSL session objects, in seconds.

指定者:

sessionTimeout 在类中 SslContext

newEngine

public final javax.net.ssl.SSLEngine newEngine(ByteBufAllocator alloc)

从类复制的说明: SslContext

Creates a new SSLEngine.

If SslProvider.OPENSSL_REFCNT is used then the object must be released. One way to do this is to wrap in a SslHandler and insert it into a pipeline. See SslContext.newHandler(ByteBufAllocator).

指定者:

newEngine 在类中 SslContext

返回:

a new SSLEngine

newEngine

public final javax.net.ssl.SSLEngine newEngine(ByteBufAllocator alloc,
                                java.lang.String peerHost,
                                int peerPort)

从类复制的说明: SslContext

Creates a new SSLEngine using advisory peer information.

If SslProvider.OPENSSL_REFCNT is used then the object must be released. One way to do this is to wrap in a SslHandler and insert it into a pipeline. See SslContext.newHandler(ByteBufAllocator, String, int).

指定者:

newEngine 在类中 SslContext

peerHost - the non-authoritative name of the host

peerPort - the non-authoritative port

返回:

a new SSLEngine

applicationProtocolNegotiator

public final JdkApplicationProtocolNegotiator applicationProtocolNegotiator()

从类复制的说明: SslContext

Returns the object responsible for negotiating application layer protocols for the TLS NPN/ALPN extensions.

指定者:

applicationProtocolNegotiator 在类中 SslContext

buildKeyManagerFactory

@Deprecated
protected static javax.net.ssl.KeyManagerFactory buildKeyManagerFactory(java.io.File certChainFile,
                                                                java.io.File keyFile,
                                                                java.lang.String keyPassword,
                                                                javax.net.ssl.KeyManagerFactory kmf)
                                                                 throws java.security.UnrecoverableKeyException,
                                                                        java.security.KeyStoreException,
                                                                        java.security.NoSuchAlgorithmException,
                                                                        javax.crypto.NoSuchPaddingException,
                                                                        java.security.spec.InvalidKeySpecException,
                                                                        java.security.InvalidAlgorithmParameterException,
                                                                        java.security.cert.CertificateException,
                                                                        java.security.KeyException,
                                                                        java.io.IOException

已过时。 will be removed.

Build a KeyManagerFactory based upon a key file, key file password, and a certificate chain.

参数:

certChainFile - a X.509 certificate chain file in PEM format

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

kmf - The existing KeyManagerFactory that will be used if not null

返回:

A KeyManagerFactory based upon a key file, key file password, and a certificate chain.

抛出:

java.security.UnrecoverableKeyException

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

javax.crypto.NoSuchPaddingException

java.security.spec.InvalidKeySpecException

java.security.InvalidAlgorithmParameterException

java.security.cert.CertificateException

java.security.KeyException

java.io.IOException

buildKeyManagerFactory

@Deprecated
protected static javax.net.ssl.KeyManagerFactory buildKeyManagerFactory(java.io.File certChainFile,
                                                                java.lang.String keyAlgorithm,
                                                                java.io.File keyFile,
                                                                java.lang.String keyPassword,
                                                                javax.net.ssl.KeyManagerFactory kmf)
                                                                 throws java.security.KeyStoreException,
                                                                        java.security.NoSuchAlgorithmException,
                                                                        javax.crypto.NoSuchPaddingException,
                                                                        java.security.spec.InvalidKeySpecException,
                                                                        java.security.InvalidAlgorithmParameterException,
                                                                        java.io.IOException,
                                                                        java.security.cert.CertificateException,
                                                                        java.security.KeyException,
                                                                        java.security.UnrecoverableKeyException

已过时。 will be removed.

Build a KeyManagerFactory based upon a key algorithm, key file, key file password, and a certificate chain.

参数:

certChainFile - a X.509 certificate chain file in PEM format

keyAlgorithm - the standard name of the requested algorithm. See the Java Secure Socket Extension Reference Guide for information about standard algorithm names.

keyFile - a PKCS#8 private key file in PEM format

keyPassword - the password of the keyFile. null if it's not password-protected.

kmf - The existing KeyManagerFactory that will be used if not null

返回:

A KeyManagerFactory based upon a key algorithm, key file, key file password, and a certificate chain.

抛出:

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

javax.crypto.NoSuchPaddingException

java.security.spec.InvalidKeySpecException

java.security.InvalidAlgorithmParameterException

java.io.IOException

java.security.cert.CertificateException

java.security.KeyException

java.security.UnrecoverableKeyException