net.shibboleth.utilities.jetty94

Class DelegateToApplicationSslContextFactory

java.lang.Object

org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.util.ssl.SslContextFactory

org.eclipse.jetty.util.ssl.SslContextFactory.Server

net.shibboleth.utilities.jetty94.DelegateToApplicationSslContextFactory

All Implemented Interfaces:

org.eclipse.jetty.util.component.Dumpable, org.eclipse.jetty.util.component.LifeCycle

public class DelegateToApplicationSslContextFactory
extends org.eclipse.jetty.util.ssl.SslContextFactory.Server

A Jetty SSL context factory that delegates X.509 trust evaluation to the application.

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.util.ssl.SslContextFactory

org.eclipse.jetty.util.ssl.SslContextFactory.Client, org.eclipse.jetty.util.ssl.SslContextFactory.Server

Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.util.component.AbstractLifeCycle.AbstractLifeCycleListener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle

org.eclipse.jetty.util.component.LifeCycle.Listener

Field Summary

Fields

Modifier and Type	Field and Description
private boolean	advertiseIssuers Whether to expose the certificates in the trust store as accepted issuers.

Fields inherited from class org.eclipse.jetty.util.ssl.SslContextFactory

DEFAULT_KEYMANAGERFACTORY_ALGORITHM, DEFAULT_TRUSTMANAGERFACTORY_ALGORITHM, KEYPASSWORD_PROPERTY, PASSWORD_PROPERTY, TRUST_ALL_CERTS

Fields inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

FAILED, RUNNING, STARTED, STARTING, STOPPED, STOPPING

Fields inherited from interface org.eclipse.jetty.util.component.Dumpable

KEY

Constructor Summary

Constructors

Constructor and Description
DelegateToApplicationSslContextFactory() Constructor.

Method Summary

Modifier and Type	Method and Description
protected TrustManager[]	getTrustManagers(KeyStore trustStore, Collection<? extends CRL> crls)
void	setAdvertiseIssuers(boolean flag) Set whether to advertise the certificates in the trust store as accepted issuers.

Methods inherited from class org.eclipse.jetty.util.ssl.SslContextFactory.Server

getNeedClientAuth, getWantClientAuth, setNeedClientAuth, setWantClientAuth

Methods inherited from class org.eclipse.jetty.util.ssl.SslContextFactory

addExcludeCipherSuites, addExcludeProtocols, checkCiphers, checkConfiguration, checkEndPointIdentificationAlgorithm, checkProtocols, checkTrustAll, customize, customize, deduceKeyLength, doStart, doStop, dump, dump, getAliases, getCertAlias, getCertChain, getCertificateFactoryInstance, getCertStoreInstance, getCipherComparator, getCrlPath, getEndpointIdentificationAlgorithm, getExcludeCipherSuites, getExcludeProtocols, getHostnameVerifier, getIncludeCipherSuites, getIncludeProtocols, getKeyManagerFactoryAlgorithm, getKeyManagerFactoryInstance, getKeyManagers, getKeyStore, getKeyStorePath, getKeyStoreProvider, getKeyStoreResource, getKeyStoreType, getMaxCertPathLength, getOcspResponderURL, getPassword, getPkixCertPathChecker, getProtocol, getProvider, getRenegotiationLimit, getSecureRandomAlgorithm, getSecureRandomInstance, getSelectedCipherSuites, getSelectedProtocols, getSslContext, getSSLContextInstance, getSslSessionCacheSize, getSslSessionTimeout, getTrustManagerFactoryAlgorithm, getTrustManagerFactoryInstance, getTrustStore, getTrustStorePath, getTrustStoreProvider, getTrustStoreResource, getTrustStoreType, getX509, getX509CertChain, isEnableCRLDP, isEnableOCSP, isRenegotiationAllowed, isSessionCachingEnabled, isTrustAll, isUseCipherSuitesOrder, isValidateCerts, isValidatePeerCerts, loadCRL, loadKeyStore, loadTrustStore, newPassword, newPKIXBuilderParameters, newSSLEngine, newSSLEngine, newSSLEngine, newSslServerSocket, newSslSocket, processIncludeCipherSuites, reload, removeExcludedCipherSuites, selectCipherSuites, selectProtocols, setCertAlias, setCipherComparator, setCrlPath, setEnableCRLDP, setEnableOCSP, setEndpointIdentificationAlgorithm, setExcludeCipherSuites, setExcludeProtocols, setHostnameVerifier, setIncludeCipherSuites, setIncludeProtocols, setKeyManagerFactoryAlgorithm, setKeyManagerPassword, setKeyStore, setKeyStorePassword, setKeyStorePath, setKeyStoreProvider, setKeyStoreResource, setKeyStoreType, setMaxCertPathLength, setOcspResponderURL, setPkixCertPathChecker, setProtocol, setProvider, setRenegotiationAllowed, setRenegotiationLimit, setSecureRandomAlgorithm, setSessionCachingEnabled, setSslContext, setSslSessionCacheSize, setSslSessionTimeout, setTrustAll, setTrustManagerFactoryAlgorithm, setTrustStore, setTrustStorePassword, setTrustStorePath, setTrustStoreProvider, setTrustStoreResource, setTrustStoreType, setUseCipherSuitesOrder, setValidateCerts, setValidatePeerCerts, toString

Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, setStopTimeout, start, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.eclipse.jetty.util.component.Dumpable

dump, dumpObject, dumpObjects, dumpSelf

Methods inherited from interface org.eclipse.jetty.util.component.LifeCycle

start, stop

Field Detail

advertiseIssuers

private boolean advertiseIssuers

Whether to expose the certificates in the trust store as accepted issuers.

Constructor Detail

DelegateToApplicationSslContextFactory

public DelegateToApplicationSslContextFactory()

Constructor. Sets SslContextFactory.Server.setWantClientAuth(boolean) to true and SslContextFactory.setValidateCerts(boolean) to false.

Method Detail

setAdvertiseIssuers

public void setAdvertiseIssuers(boolean flag)

Set whether to advertise the certificates in the trust store as accepted issuers.

Defaults to false.

Parameters:

flag - flag to set

getTrustManagers

protected TrustManager[] getTrustManagers(KeyStore trustStore,
                                          Collection<? extends CRL> crls)
                                   throws Exception

Overrides:

getTrustManagers in class org.eclipse.jetty.util.ssl.SslContextFactory

Throws:

Exception