com.atlassian.httpclient.apache.httpcomponents
Class DHEDisabledSSLSessionStrategy

java.lang.Object
  org.apache.http.nio.conn.ssl.SSLIOSessionStrategy
      com.atlassian.httpclient.apache.httpcomponents.DHEDisabledSSLSessionStrategy

All Implemented Interfaces:

org.apache.http.nio.conn.SchemeIOSessionStrategy

public class DHEDisabledSSLSessionStrategy
extends org.apache.http.nio.conn.ssl.SSLIOSessionStrategy

Workaround for http://bugs.java.com/bugdatabase/view_bug.do?bug_id=6521495 See https://ecosystem.atlassian.net/browse/AC-1424 for more details This class disables SSL ciphers using Diffie-Hellmann key exchange when connecting to any of the blacklisted hosts. Specifically, we have to disable DHE for *.rhcloud.com, since they have setup a dh_param with length of 2048. The code should be deleted once Ondemand is updated to JDK8.

Field Summary

Fields inherited from class org.apache.http.nio.conn.ssl.SSLIOSessionStrategy

ALLOW_ALL_HOSTNAME_VERIFIER, BROWSER_COMPATIBLE_HOSTNAME_VERIFIER, STRICT_HOSTNAME_VERIFIER

Constructor Summary

DHEDisabledSSLSessionStrategy(SSLContext sslContext)

DHEDisabledSSLSessionStrategy(SSLContext sslContext, List<String> hostBlacklist, String[] httpsProtocols, String[] httpsCipherSuites, org.apache.http.conn.ssl.X509HostnameVerifier hostnameVerifier)

Method Summary

org.apache.http.nio.reactor.ssl.SSLIOSession

upgrade(org.apache.http.HttpHost host, org.apache.http.nio.reactor.IOSession ioSession)

Methods inherited from class org.apache.http.nio.conn.ssl.SSLIOSessionStrategy

getDefaultStrategy, getSystemDefaultStrategy, initializeEngine, isLayeringRequired, verifySession

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DHEDisabledSSLSessionStrategy

public DHEDisabledSSLSessionStrategy(SSLContext sslContext,
                                     List<String> hostBlacklist,
                                     @Nullable
                                     String[] httpsProtocols,
                                     @Nullable
                                     String[] httpsCipherSuites,
                                     org.apache.http.conn.ssl.X509HostnameVerifier hostnameVerifier)

DHEDisabledSSLSessionStrategy

public DHEDisabledSSLSessionStrategy(SSLContext sslContext)

Method Detail

upgrade

public org.apache.http.nio.reactor.ssl.SSLIOSession upgrade(org.apache.http.HttpHost host,
                                                            org.apache.http.nio.reactor.IOSession ioSession)
                                                     throws IOException

Specified by:

upgrade in interface org.apache.http.nio.conn.SchemeIOSessionStrategy

Overrides:

upgrade in class org.apache.http.nio.conn.ssl.SSLIOSessionStrategy

Throws:

IOException