Module nl.altindag.ssl

Package nl.altindag.ssl

Class SSLFactory.Builder

java.lang.Object

nl.altindag.ssl.SSLFactory.Builder

Enclosing class:

SSLFactory

public static class SSLFactory.Builder
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
private static final String	CERTIFICATE_VALIDATION_EXCEPTION_MESSAGE
private final List<String>	ciphers
private final List<String>	excludedCiphers
private final List<String>	excludedProtocols
private HostnameVerifier	hostnameVerifier
private Predicate<HostnameVerifierParameters>	hostnameVerifierEnhancer
private final List<KeyStoreHolder>	identities
private static final String	IDENTITY_AND_TRUST_MATERIAL_VALIDATION_EXCEPTION_MESSAGE
private static final String	IDENTITY_VALIDATION_EXCEPTION_MESSAGE
private final List<X509ExtendedKeyManager>	identityManagers
private boolean	inflatableKeyManagerEnabled
private boolean	loggingKeyManagerEnabled
private boolean	loggingTrustManagerEnabled
private final Map<String,List<URI>>	preferredAliasToHost
private final List<String>	protocols
private SecureRandom	secureRandom
private Provider	securityProvider
private String	securityProviderName
private int	sessionCacheSizeInBytes
private int	sessionTimeoutInSeconds
private boolean	shouldTrustedCertificatesBeConcealed
private String	sslContextAlgorithm
private final SSLParameters	sslParameters
private boolean	swappableKeyManagerEnabled
private boolean	swappableSslParametersEnabled
private boolean	swappableTrustManagerEnabled
private static final String	SYSTEM_PROPERTY_VALIDATION_EXCEPTION_MESSAGE
private static final String	TRUST_STORE_VALIDATION_EXCEPTION_MESSAGE
private Predicate<TrustManagerParameters>	trustManagerParametersValidator
private final List<X509ExtendedTrustManager>	trustManagers
private final List<KeyStore>	trustStores

Constructor Summary

Constructors

Modifier	Constructor	Description
private	Builder()

Method Summary

Modifier and Type	Method	Description
SSLFactory	build()
private X509ExtendedKeyManager	createKeyManager()
private SSLParameters	createSslParameters(SSLContext sslContext)
private X509ExtendedTrustManager	createTrustManager()
private List<String>	extractPropertyValues(String systemProperty)
private boolean	isIdentityMaterialPresent()
private boolean	isTrustMaterialPresent()
private void	validateKeyStore(KeyStore keyStore, String exceptionMessage)
SSLFactory.Builder	withCiphers(String... ciphers)
SSLFactory.Builder	withConcealedTrustMaterial()
SSLFactory.Builder	withDefaultTrustMaterial()
SSLFactory.Builder	withDummyIdentityMaterial()
SSLFactory.Builder	withDummyTrustMaterial()
SSLFactory.Builder	withExcludedCiphers(String... ciphers)
SSLFactory.Builder	withExcludedProtocols(String... protocols)
<T extends HostnameVerifier> SSLFactory.Builder	withHostnameVerifier(T hostnameVerifier)
SSLFactory.Builder	withHostnameVerifierEnhancer(Predicate<HostnameVerifierParameters> hostnameVerifierParametersValidator)
SSLFactory.Builder	withIdentityMaterial(InputStream identityStream, char[] identityStorePassword)
SSLFactory.Builder	withIdentityMaterial(InputStream identityStream, char[] identityStorePassword, char[] identityPassword)
SSLFactory.Builder	withIdentityMaterial(InputStream identityStream, char[] identityStorePassword, char[] identityPassword, String identityStoreType)
SSLFactory.Builder	withIdentityMaterial(InputStream identityStream, char[] identityStorePassword, char[] identityPassword, String identityStoreType, String providerName)
SSLFactory.Builder	withIdentityMaterial(InputStream identityStream, char[] identityStorePassword, char[] identityPassword, String identityStoreType, Provider provider)
SSLFactory.Builder	withIdentityMaterial(InputStream identityStream, char[] identityStorePassword, String identityStoreType)
private SSLFactory.Builder	withIdentityMaterial(Object identitySource, String identityStoreType, Supplier<KeyStoreHolder> keyStoreHolderSupplier)
SSLFactory.Builder	withIdentityMaterial(String identityStorePath, char[] identityStorePassword)
SSLFactory.Builder	withIdentityMaterial(String identityStorePath, char[] identityStorePassword, char[] identityPassword)
SSLFactory.Builder	withIdentityMaterial(String identityStorePath, char[] identityStorePassword, char[] identityPassword, String identityStoreType)
SSLFactory.Builder	withIdentityMaterial(String identityStorePath, char[] identityStorePassword, char[] identityPassword, String identityStoreType, String providerName)
SSLFactory.Builder	withIdentityMaterial(String identityStorePath, char[] identityStorePassword, char[] identityPassword, String identityStoreType, Provider provider)
SSLFactory.Builder	withIdentityMaterial(String identityStorePath, char[] identityStorePassword, String identityStoreType)
private SSLFactory.Builder	withIdentityMaterial(String identityStorePath, String identityStoreType, Supplier<KeyStoreHolder> keyStoreHolderSupplier)
SSLFactory.Builder	withIdentityMaterial(Path identityStorePath, char[] identityStorePassword)
SSLFactory.Builder	withIdentityMaterial(Path identityStorePath, char[] identityStorePassword, char[] identityPassword)
SSLFactory.Builder	withIdentityMaterial(Path identityStorePath, char[] identityStorePassword, char[] identityPassword, String identityStoreType)
SSLFactory.Builder	withIdentityMaterial(Path identityStorePath, char[] identityStorePassword, char[] identityPassword, String identityStoreType, String providerName)
SSLFactory.Builder	withIdentityMaterial(Path identityStorePath, char[] identityStorePassword, char[] identityPassword, String identityStoreType, Provider provider)
SSLFactory.Builder	withIdentityMaterial(Path identityStorePath, char[] identityStorePassword, String identityStoreType)
final <T extends Certificate> SSLFactory.Builder	withIdentityMaterial(Key privateKey, char[] privateKeyPassword, String alias, List<T> certificateChain)
final <T extends Certificate> SSLFactory.Builder	withIdentityMaterial(Key privateKey, char[] privateKeyPassword, String alias, T... certificateChain)
final <T extends Certificate> SSLFactory.Builder	withIdentityMaterial(Key privateKey, char[] privateKeyPassword, List<T> certificateChain)
final <T extends Certificate> SSLFactory.Builder	withIdentityMaterial(Key privateKey, char[] privateKeyPassword, T... certificateChain)
SSLFactory.Builder	withIdentityMaterial(KeyStore identityStore, char[] identityPassword)
<T extends X509KeyManager> SSLFactory.Builder	withIdentityMaterial(T keyManager)
SSLFactory.Builder	withIdentityRoute(String alias, String... hosts)
private SSLFactory.Builder	withIdentityRoute(String alias, List<URI> hosts)
SSLFactory.Builder	withIdentityRoute(Map<String,List<String>> aliasesToHosts)
SSLFactory.Builder	withInflatableIdentityMaterial()
SSLFactory.Builder	withInflatableTrustMaterial()
SSLFactory.Builder	withInflatableTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType, Predicate<TrustManagerParameters> trustManagerParametersPredicate)
SSLFactory.Builder	withLoggingIdentityMaterial()
SSLFactory.Builder	withLoggingTrustMaterial()
SSLFactory.Builder	withNeedClientAuthentication()
SSLFactory.Builder	withNeedClientAuthentication(boolean needClientAuthentication)
SSLFactory.Builder	withProtocols(String... protocols)
<T extends SecureRandom> SSLFactory.Builder	withSecureRandom(T secureRandom)
SSLFactory.Builder	withSecurityProvider(String securityProviderName)
<T extends Provider> SSLFactory.Builder	withSecurityProvider(T securityProvider)
SSLFactory.Builder	withSessionCacheSize(int cacheSizeInBytes)
SSLFactory.Builder	withSessionTimeout(int timeoutInSeconds)
SSLFactory.Builder	withSslContextAlgorithm(String sslContextAlgorithm)
SSLFactory.Builder	withSwappableIdentityMaterial()	Enables the possibility to swap the underlying KeyManager at runtime.
SSLFactory.Builder	withSwappableSslParameters()
SSLFactory.Builder	withSwappableTrustMaterial()	Enables the possibility to swap the underlying TrustManager at runtime.
SSLFactory.Builder	withSystemPropertyDerivedCiphers()
SSLFactory.Builder	withSystemPropertyDerivedIdentityMaterial()
SSLFactory.Builder	withSystemPropertyDerivedProtocols()
SSLFactory.Builder	withSystemPropertyDerivedTrustMaterial()
SSLFactory.Builder	withSystemTrustMaterial()
SSLFactory.Builder	withTrustEnhancer(Predicate<TrustManagerParameters> validator)
SSLFactory.Builder	withTrustingAllCertificatesWithoutValidation()
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, String trustStoreType)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, String trustStoreType, String providerName)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, String trustStoreType, String providerName, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, String trustStoreType, Provider provider)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, String trustStoreType, Provider provider, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, String trustStoreType, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(InputStream trustStoreStream, char[] trustStorePassword, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
private SSLFactory.Builder	withTrustMaterial(Object trustStoreSource, String trustStoreType, Supplier<KeyStore> trustStoreSupplier)
private SSLFactory.Builder	withTrustMaterial(Object trustStoreSource, String trustStoreType, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions, Supplier<KeyStore> trustStoreSupplier)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, String trustStoreType)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, String trustStoreType, String providerName)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, String trustStoreType, String providerName, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, String trustStoreType, Provider provider)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, String trustStoreType, Provider provider, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, String trustStoreType, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(String trustStorePath, char[] trustStorePassword, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
private SSLFactory.Builder	withTrustMaterial(String trustStorePath, String trustStoreType, Supplier<KeyStore> trustStoreSupplier)
private SSLFactory.Builder	withTrustMaterial(String trustStorePath, String trustStoreType, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions, Supplier<KeyStore> trustStoreSupplier)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType, String providerName)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType, String providerName, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType, Provider provider)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType, Provider provider, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, String trustStoreType, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(Path trustStorePath, char[] trustStorePassword, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(KeyStore trustStore)
SSLFactory.Builder	withTrustMaterial(KeyStore trustStore, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
<T extends Certificate> SSLFactory.Builder	withTrustMaterial(List<T> certificates)
<T extends Certificate> SSLFactory.Builder	withTrustMaterial(List<T> certificates, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withTrustMaterial(Set<X509Certificate> certificates, TrustAnchorTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
<T extends X509TrustManager> SSLFactory.Builder	withTrustMaterial(T trustManager)
final <T extends Certificate> SSLFactory.Builder	withTrustMaterial(T... certificates)
final <T extends Certificate> SSLFactory.Builder	withTrustMaterial(T[] certificates, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
<T extends X509TrustManager> SSLFactory.Builder	withTrustMaterial(T trustManager, TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)
SSLFactory.Builder	withUnsafeHostnameVerifier()
SSLFactory.Builder	withUnsafeTrustMaterial()	A shorter method for using the unsafe trust material
SSLFactory.Builder	withWantClientAuthentication()
SSLFactory.Builder	withWantClientAuthentication(boolean wantClientAuthentication)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

TRUST_STORE_VALIDATION_EXCEPTION_MESSAGE

private static final String TRUST_STORE_VALIDATION_EXCEPTION_MESSAGE

See Also:

• Constant Field Values

IDENTITY_VALIDATION_EXCEPTION_MESSAGE

private static final String IDENTITY_VALIDATION_EXCEPTION_MESSAGE

See Also:

• Constant Field Values

IDENTITY_AND_TRUST_MATERIAL_VALIDATION_EXCEPTION_MESSAGE

private static final String IDENTITY_AND_TRUST_MATERIAL_VALIDATION_EXCEPTION_MESSAGE

See Also:

• Constant Field Values

CERTIFICATE_VALIDATION_EXCEPTION_MESSAGE

private static final String CERTIFICATE_VALIDATION_EXCEPTION_MESSAGE

See Also:

• Constant Field Values

SYSTEM_PROPERTY_VALIDATION_EXCEPTION_MESSAGE

private static final String SYSTEM_PROPERTY_VALIDATION_EXCEPTION_MESSAGE

See Also:

• Constant Field Values

sslContextAlgorithm

private String sslContextAlgorithm

securityProvider

private Provider securityProvider

securityProviderName

private String securityProviderName

secureRandom

private SecureRandom secureRandom

hostnameVerifier

private HostnameVerifier hostnameVerifier

hostnameVerifierEnhancer

private Predicate<HostnameVerifierParameters> hostnameVerifierEnhancer

identities

private final List<KeyStoreHolder> identities

trustStores

private final List<KeyStore> trustStores

identityManagers

private final List<X509ExtendedKeyManager> identityManagers

trustManagers

private final List<X509ExtendedTrustManager> trustManagers

sslParameters

private final SSLParameters sslParameters

preferredAliasToHost

private final Map<String,List<URI>> preferredAliasToHost

protocols

private final List<String> protocols

ciphers

private final List<String> ciphers

excludedProtocols

private final List<String> excludedProtocols

excludedCiphers

private final List<String> excludedCiphers

swappableKeyManagerEnabled

private boolean swappableKeyManagerEnabled

swappableTrustManagerEnabled

private boolean swappableTrustManagerEnabled

swappableSslParametersEnabled

private boolean swappableSslParametersEnabled

loggingKeyManagerEnabled

private boolean loggingKeyManagerEnabled

loggingTrustManagerEnabled

private boolean loggingTrustManagerEnabled

inflatableKeyManagerEnabled

private boolean inflatableKeyManagerEnabled

sessionTimeoutInSeconds

private int sessionTimeoutInSeconds

sessionCacheSizeInBytes

private int sessionCacheSizeInBytes

trustManagerParametersValidator

private Predicate<TrustManagerParameters> trustManagerParametersValidator

shouldTrustedCertificatesBeConcealed

private boolean shouldTrustedCertificatesBeConcealed

Constructor Details

Builder

private Builder()

Method Details

withSystemTrustMaterial

public SSLFactory.Builder withSystemTrustMaterial()

withDefaultTrustMaterial

public SSLFactory.Builder withDefaultTrustMaterial()

withSystemPropertyDerivedTrustMaterial

public SSLFactory.Builder withSystemPropertyDerivedTrustMaterial()

withUnsafeTrustMaterial

public SSLFactory.Builder withUnsafeTrustMaterial()

A shorter method for using the unsafe trust material

Returns:

SSLFactory.Builder

See Also:

• withTrustingAllCertificatesWithoutValidation()

withDummyTrustMaterial

public SSLFactory.Builder withDummyTrustMaterial()

withSwappableTrustMaterial

public SSLFactory.Builder withSwappableTrustMaterial()

Enables the possibility to swap the underlying TrustManager at runtime. After this option has been enabled the TrustManager can be swapped with TrustManagerUtils#swapTrustManager(swappableTrustManager, newTrustManager)

Returns:

SSLFactory.Builder

withLoggingTrustMaterial

public SSLFactory.Builder withLoggingTrustMaterial()

withTrustMaterial

public <T extends X509TrustManager>
SSLFactory.Builder withTrustMaterial(T trustManager)

withTrustMaterial

public <T extends ManagerFactoryParameters>
SSLFactory.Builder withTrustMaterial(T managerFactoryParameters)

withTrustMaterial

public <T extends X509TrustManager>
SSLFactory.Builder withTrustMaterial(T trustManager,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public <T extends TrustManagerFactory>
SSLFactory.Builder withTrustMaterial(T trustManagerFactory)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 String trustStoreType)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 Provider provider)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 String providerName)

withTrustMaterial

private SSLFactory.Builder withTrustMaterial(String trustStorePath,
 String trustStoreType,
 Supplier<KeyStore> trustStoreSupplier)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 Provider provider,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(String trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 String providerName,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

private SSLFactory.Builder withTrustMaterial(String trustStorePath,
 String trustStoreType,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions,
 Supplier<KeyStore> trustStoreSupplier)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 Provider provider)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 String providerName)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 Provider provider,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 String providerName,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 String trustStoreType)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 String trustStoreType,
 Provider provider)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 String trustStoreType,
 String providerName)

withTrustMaterial

private SSLFactory.Builder withTrustMaterial(Object trustStoreSource,
 String trustStoreType,
 Supplier<KeyStore> trustStoreSupplier)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 String trustStoreType,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 String trustStoreType,
 Provider provider,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(InputStream trustStoreStream,
 char[] trustStorePassword,
 String trustStoreType,
 String providerName,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

private SSLFactory.Builder withTrustMaterial(Object trustStoreSource,
 String trustStoreType,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions,
 Supplier<KeyStore> trustStoreSupplier)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(KeyStore trustStore)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(KeyStore trustStore,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public SSLFactory.Builder withTrustMaterial(Set<X509Certificate> certificates,
 TrustAnchorTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

@SafeVarargs
public final <T extends Certificate>
SSLFactory.Builder withTrustMaterial(T... certificates)

withTrustMaterial

public final <T extends Certificate>
SSLFactory.Builder withTrustMaterial(T[] certificates,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withTrustMaterial

public <T extends Certificate> SSLFactory.Builder withTrustMaterial(List<T> certificates)

withTrustMaterial

public <T extends Certificate> SSLFactory.Builder withTrustMaterial(List<T> certificates,
 TrustStoreTrustOptions<? extends CertPathTrustManagerParameters> trustOptions)

withSystemPropertyDerivedIdentityMaterial

public SSLFactory.Builder withSystemPropertyDerivedIdentityMaterial()

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 char[] identityStorePassword)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 char[] identityStorePassword,
 String identityStoreType)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType,
 Provider provider)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType,
 String providerName)

withIdentityMaterial

private SSLFactory.Builder withIdentityMaterial(String identityStorePath,
 String identityStoreType,
 Supplier<KeyStoreHolder> keyStoreHolderSupplier)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(Path identityStorePath,
 char[] identityStorePassword)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(Path identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(Path identityStorePath,
 char[] identityStorePassword,
 String identityStoreType)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(Path identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(Path identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType,
 Provider provider)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(Path identityStorePath,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType,
 String providerName)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(InputStream identityStream,
 char[] identityStorePassword)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(InputStream identityStream,
 char[] identityStorePassword,
 char[] identityPassword)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(InputStream identityStream,
 char[] identityStorePassword,
 String identityStoreType)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(InputStream identityStream,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(InputStream identityStream,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType,
 Provider provider)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(InputStream identityStream,
 char[] identityStorePassword,
 char[] identityPassword,
 String identityStoreType,
 String providerName)

withIdentityMaterial

private SSLFactory.Builder withIdentityMaterial(Object identitySource,
 String identityStoreType,
 Supplier<KeyStoreHolder> keyStoreHolderSupplier)

withIdentityMaterial

public SSLFactory.Builder withIdentityMaterial(KeyStore identityStore,
 char[] identityPassword)

withIdentityMaterial

@SafeVarargs
public final <T extends Certificate>
SSLFactory.Builder withIdentityMaterial(Key privateKey,
 char[] privateKeyPassword,
 T... certificateChain)

withIdentityMaterial

@SafeVarargs
public final <T extends Certificate>
SSLFactory.Builder withIdentityMaterial(Key privateKey,
 char[] privateKeyPassword,
 String alias,
 T... certificateChain)

withIdentityMaterial

public final <T extends Certificate>
SSLFactory.Builder withIdentityMaterial(Key privateKey,
 char[] privateKeyPassword,
 List<T> certificateChain)

withIdentityMaterial

public final <T extends Certificate>
SSLFactory.Builder withIdentityMaterial(Key privateKey,
 char[] privateKeyPassword,
 String alias,
 List<T> certificateChain)

withIdentityMaterial

public <T extends X509KeyManager>
SSLFactory.Builder withIdentityMaterial(T keyManager)

withIdentityMaterial

public <T extends KeyManagerFactory>
SSLFactory.Builder withIdentityMaterial(T keyManagerFactory)

withDummyIdentityMaterial

public SSLFactory.Builder withDummyIdentityMaterial()

withSwappableIdentityMaterial

public SSLFactory.Builder withSwappableIdentityMaterial()

Enables the possibility to swap the underlying KeyManager at runtime. After this option has been enabled the KeyManager can be swapped with KeyManagerUtils#swapKeyManager(swappableKeyManager, newKeyManager)

Returns:

SSLFactory.Builder

withLoggingIdentityMaterial

public SSLFactory.Builder withLoggingIdentityMaterial()

withInflatableIdentityMaterial

public SSLFactory.Builder withInflatableIdentityMaterial()

withInflatableTrustMaterial

public SSLFactory.Builder withInflatableTrustMaterial()

withInflatableTrustMaterial

public SSLFactory.Builder withInflatableTrustMaterial(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 Predicate<TrustManagerParameters> trustManagerParametersPredicate)

validateKeyStore

private void validateKeyStore(KeyStore keyStore,
 String exceptionMessage)

withIdentityRoute

public SSLFactory.Builder withIdentityRoute(String alias,
 String... hosts)

withIdentityRoute

public SSLFactory.Builder withIdentityRoute(Map<String,List<String>> aliasesToHosts)

withIdentityRoute

private SSLFactory.Builder withIdentityRoute(String alias,
 List<URI> hosts)

withHostnameVerifier

public <T extends HostnameVerifier>
SSLFactory.Builder withHostnameVerifier(T hostnameVerifier)

withUnsafeHostnameVerifier

public SSLFactory.Builder withUnsafeHostnameVerifier()

withHostnameVerifierEnhancer

public SSLFactory.Builder withHostnameVerifierEnhancer(Predicate<HostnameVerifierParameters> hostnameVerifierParametersValidator)

withCiphers

public SSLFactory.Builder withCiphers(String... ciphers)

withExcludedCiphers

public SSLFactory.Builder withExcludedCiphers(String... ciphers)

withSystemPropertyDerivedCiphers

public SSLFactory.Builder withSystemPropertyDerivedCiphers()

withProtocols

public SSLFactory.Builder withProtocols(String... protocols)

withExcludedProtocols

public SSLFactory.Builder withExcludedProtocols(String... protocols)

withSystemPropertyDerivedProtocols

public SSLFactory.Builder withSystemPropertyDerivedProtocols()

extractPropertyValues

private List<String> extractPropertyValues(String systemProperty)

withNeedClientAuthentication

public SSLFactory.Builder withNeedClientAuthentication()

withNeedClientAuthentication

public SSLFactory.Builder withNeedClientAuthentication(boolean needClientAuthentication)

withWantClientAuthentication

public SSLFactory.Builder withWantClientAuthentication()

withWantClientAuthentication

public SSLFactory.Builder withWantClientAuthentication(boolean wantClientAuthentication)

withSessionTimeout

public SSLFactory.Builder withSessionTimeout(int timeoutInSeconds)

withSessionCacheSize

public SSLFactory.Builder withSessionCacheSize(int cacheSizeInBytes)

withSslContextAlgorithm

public SSLFactory.Builder withSslContextAlgorithm(String sslContextAlgorithm)

withSwappableSslParameters

public SSLFactory.Builder withSwappableSslParameters()

withSecurityProvider

public <T extends Provider> SSLFactory.Builder withSecurityProvider(T securityProvider)

withSecurityProvider

public SSLFactory.Builder withSecurityProvider(String securityProviderName)

withSecureRandom

public <T extends SecureRandom> SSLFactory.Builder withSecureRandom(T secureRandom)

withTrustingAllCertificatesWithoutValidation

public SSLFactory.Builder withTrustingAllCertificatesWithoutValidation()

withTrustEnhancer

public SSLFactory.Builder withTrustEnhancer(Predicate<TrustManagerParameters> validator)

withConcealedTrustMaterial

public SSLFactory.Builder withConcealedTrustMaterial()

build

public SSLFactory build()

isTrustMaterialPresent

private boolean isTrustMaterialPresent()

isIdentityMaterialPresent

private boolean isIdentityMaterialPresent()

createKeyManager

private X509ExtendedKeyManager createKeyManager()

createTrustManager

private X509ExtendedTrustManager createTrustManager()

createSslParameters

private SSLParameters createSslParameters(SSLContext sslContext)