public interface SecureEnvironment
SecureEnvironment
interface defines all methods which environment implementation
should have to be accepted by SSLEngineFactory
.Modifier and Type | Method and Description |
---|---|
boolean |
sslEnabled()
Identifies if SSL should be enabled.
|
KeyStore |
sslKeystore()
Allows to directly configure a
KeyStore . |
String |
sslKeystoreFile()
Identifies the filepath to the ssl keystore.
|
String |
sslKeystorePassword()
The password which is used to protect the keystore.
|
KeyStore |
sslTruststore()
Allows to directly configure a
KeyStore . |
String |
sslTruststoreFile()
Identifies the filepath to the ssl TrustManager keystore.
|
String |
sslTruststorePassword()
The password which is used to protect the TrustManager keystore.
|
boolean sslEnabled()
String sslKeystoreFile()
sslTruststoreFile()
this keystore will be used to initialize
both the key factory as well as the trust factory with java SSL. This
needs to be the case for backwards compatibility, but if you do not need
X.509 client cert authentication you might as well just use sslTruststoreFile()
alone.String sslKeystorePassword()
sslKeystoreFile()
is used.KeyStore sslKeystore()
KeyStore
.
If this method is used without also specifying
sslTruststore()
this keystore will be used to initialize
both the key factory as well as the trust factory with java SSL. This
needs to be the case for backwards compatibility, but if you do not need
X.509 client cert authentication you might as well just use sslTruststore()
alone.String sslTruststoreFile()
sslKeystoreFile()
this keystore will be used to initialize
both the key factory as well as the trust factory with java SSL. Prefer
this method over the sslKeystoreFile()
if you do not need
X.509 client auth and just need server side certificate checking.String sslTruststorePassword()
sslTruststoreFile()
is used.KeyStore sslTruststore()
KeyStore
.
If this method is used without also specifying
sslKeystore()
this keystore will be used to initialize
both the key factory as well as the trust factory with java SSL. Prefer
this method over the sslKeystore()
if you do not need
X.509 client auth and just need server side certificate checking.Copyright © 2019 Couchbase, Inc.. All rights reserved.