Modifier and Type	Class and Description
public static enum	SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE
private static class	SSLAlgorithmConstraints.SupportedSignatureAlgorithmConstraints

Modifier and Type	Field and Description
pack-priv static final SSLAlgorithmConstraints	DEFAULT
pack-priv static final SSLAlgorithmConstraints	DEFAULT_SSL_ONLY
private final boolean	enabledX509DisabledAlgConstraints
private final AlgorithmConstraints	peerSpecifiedConstraints
private static final DisabledAlgorithmConstraints	tlsDisabledAlgConstraints
private final AlgorithmConstraints	userSpecifiedConstraints
private static final DisabledAlgorithmConstraints	x509DisabledAlgConstraints

Access	Constructor and Description
private	SSLAlgorithmConstraints(AlgorithmConstraints userSpecifiedConstraints, boolean enabledX509DisabledAlgConstraints)
private	SSLAlgorithmConstraints(AlgorithmConstraints userSpecifiedConstraints, SSLAlgorithmConstraints.SupportedSignatureAlgorithmConstraints peerSpecifiedConstraints, boolean withDefaultCertPathConstraints)

Method Summary

Modifier and Type	Method and Description
pack-priv static SSLAlgorithmConstraints	Returns: a SSLAlgorithmConstraints instance forEngine(SSLEngine engine with configured constraints engine, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints) Returns a SSLAlgorithmConstraints instance that checks the constraints configured for the given `engine` in addition to standard checks.
pack-priv static AlgorithmConstraints	Returns: a AlgorithmConstraints instance forQUIC(QuicTLSEngine QuicTLSEngine used to determine the constraints engine, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE SIGNATURE_CONSTRAINTS_MODE mode, boolean whether or not to apply the default certpath algorithm constraints too withDefaultCertPathConstraints) Returns an `AlgorithmConstraints` instance that uses the constraints configured for the given `engine` in addition to the platform configured constraints.
pack-priv static SSLAlgorithmConstraints	Returns: a SSLAlgorithmConstraints instance forSocket(SSLSocket socket with configured constraints socket, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints) Returns a SSLAlgorithmConstraints instance that checks the constraints configured for the given `socket` in addition to standard checks.
private static AlgorithmConstraints	getUserSpecifiedConstraints(SSLEngine engine)
private static AlgorithmConstraints	getUserSpecifiedConstraints(SSLSocket socket)
private static AlgorithmConstraints	getUserSpecifiedConstraints(QuicTLSEngine quicEngine)
private static AlgorithmConstraints	nullIfDefault(AlgorithmConstraints constraints)
public boolean	permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Determines whether an algorithm is granted permission for the specified cryptographic primitives.
public boolean	permits(Set<CryptoPrimitive> primitives, Key key) Implements java.security.AlgorithmConstraints.permits. Determines whether a key is granted permission for the specified cryptographic primitives.
public boolean	permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives.
pack-priv boolean	permits(String algorithm, Set<SSLScope> scopes)
pack-priv static SSLAlgorithmConstraints	Returns: a SSLAlgorithmConstraints instance wrap(AlgorithmConstraints additional constraints to check userSpecifiedConstraints) Returns a SSLAlgorithmConstraints instance that checks the provided `userSpecifiedConstraints` in addition to standard checks.
private static SSLAlgorithmConstraints	wrap(AlgorithmConstraints userSpecifiedConstraints, boolean withDefaultCertPathConstraints)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

DEFAULT	back to summary
pack-priv static final SSLAlgorithmConstraints DEFAULT

DEFAULT_SSL_ONLY	back to summary
pack-priv static final SSLAlgorithmConstraints DEFAULT_SSL_ONLY

enabledX509DisabledAlgConstraints	back to summary
private final boolean enabledX509DisabledAlgConstraints

peerSpecifiedConstraints	back to summary
private final AlgorithmConstraints peerSpecifiedConstraints

tlsDisabledAlgConstraints	back to summary
private static final DisabledAlgorithmConstraints tlsDisabledAlgConstraints

userSpecifiedConstraints	back to summary
private final AlgorithmConstraints userSpecifiedConstraints

x509DisabledAlgConstraints	back to summary
private static final DisabledAlgorithmConstraints x509DisabledAlgConstraints

Constructor Detail

SSLAlgorithmConstraints	back to summary
private SSLAlgorithmConstraints(AlgorithmConstraints userSpecifiedConstraints, boolean enabledX509DisabledAlgConstraints)

SSLAlgorithmConstraints	back to summary
private SSLAlgorithmConstraints(AlgorithmConstraints userSpecifiedConstraints, SSLAlgorithmConstraints.SupportedSignatureAlgorithmConstraints peerSpecifiedConstraints, boolean withDefaultCertPathConstraints)

Method Detail

forEngine back to summary

forEngine	back to summary
pack-priv static SSLAlgorithmConstraints forEngine(SSLEngine engine, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints) Returns a SSLAlgorithmConstraints instance that checks the constraints configured for the given `engine` in addition to standard checks. Returns a singleton instance if the constraints are null or DEFAULT. Parameters engine:SSLEngine engine with configured constraints mode:SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE SIGNATURE_CONSTRAINTS_MODE Returns:SSLAlgorithmConstraints a SSLAlgorithmConstraints instance

pack-priv static SSLAlgorithmConstraints forEngine(SSLEngine engine, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints)

Returns a SSLAlgorithmConstraints instance that checks the constraints configured for the given engine in addition to standard checks. Returns a singleton instance if the constraints are null or DEFAULT.

Parameters

engine:SSLEngine: engine with configured constraints
mode:SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE: SIGNATURE_CONSTRAINTS_MODE

Returns:SSLAlgorithmConstraints

a SSLAlgorithmConstraints instance

forQUIC back to summary

forQUIC	back to summary
pack-priv static AlgorithmConstraints forQUIC(QuicTLSEngine engine, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints) Returns an `AlgorithmConstraints` instance that uses the constraints configured for the given `engine` in addition to the platform configured constraints. If the given `allowedAlgorithms` is non-null then the returned `AlgorithmConstraints` will only permit those allowed algorithms. Parameters engine:QuicTLSEngine QuicTLSEngine used to determine the constraints mode:SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE SIGNATURE_CONSTRAINTS_MODE withDefaultCertPathConstraints:boolean whether or not to apply the default certpath algorithm constraints too Returns:AlgorithmConstraints a AlgorithmConstraints instance

pack-priv static AlgorithmConstraints forQUIC(QuicTLSEngine engine, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints)

Returns an AlgorithmConstraints instance that uses the constraints configured for the given engine in addition to the platform configured constraints.

If the given allowedAlgorithms is non-null then the returned AlgorithmConstraints will only permit those allowed algorithms.

Parameters

engine:QuicTLSEngine: QuicTLSEngine used to determine the constraints
mode:SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE: SIGNATURE_CONSTRAINTS_MODE
withDefaultCertPathConstraints:boolean: whether or not to apply the default certpath algorithm constraints too

Returns:AlgorithmConstraints

a AlgorithmConstraints instance

forSocket back to summary

forSocket	back to summary
pack-priv static SSLAlgorithmConstraints forSocket(SSLSocket socket, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints) Returns a SSLAlgorithmConstraints instance that checks the constraints configured for the given `socket` in addition to standard checks. Returns a singleton instance if the constraints are null or DEFAULT. Parameters socket:SSLSocket socket with configured constraints mode:SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE SIGNATURE_CONSTRAINTS_MODE Returns:SSLAlgorithmConstraints a SSLAlgorithmConstraints instance

pack-priv static SSLAlgorithmConstraints forSocket(SSLSocket socket, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode, boolean withDefaultCertPathConstraints)

Returns a SSLAlgorithmConstraints instance that checks the constraints configured for the given socket in addition to standard checks. Returns a singleton instance if the constraints are null or DEFAULT.

Parameters

socket:SSLSocket: socket with configured constraints
mode:SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE: SIGNATURE_CONSTRAINTS_MODE

Returns:SSLAlgorithmConstraints

a SSLAlgorithmConstraints instance

getUserSpecifiedConstraints	back to summary
private static AlgorithmConstraints getUserSpecifiedConstraints(SSLEngine engine)

getUserSpecifiedConstraints	back to summary
private static AlgorithmConstraints getUserSpecifiedConstraints(SSLSocket socket)

getUserSpecifiedConstraints	back to summary
private static AlgorithmConstraints getUserSpecifiedConstraints(QuicTLSEngine quicEngine)

nullIfDefault	back to summary
private static AlgorithmConstraints nullIfDefault(AlgorithmConstraints constraints)

permits	back to summary
public boolean permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Doc from java.security.AlgorithmConstraints.permits. Determines whether an algorithm is granted permission for the specified cryptographic primitives. Annotations @Override

permits

back to summary

public boolean permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters)

Implements java.security.AlgorithmConstraints.permits.

Doc from java.security.AlgorithmConstraints.permits.

Determines whether an algorithm is granted permission for the specified cryptographic primitives.

Annotations

@Override

permits	back to summary
public boolean permits(Set<CryptoPrimitive> primitives, Key key) Implements java.security.AlgorithmConstraints.permits. Doc from java.security.AlgorithmConstraints.permits. Determines whether a key is granted permission for the specified cryptographic primitives. This method is usually used to check key size and key usage. Annotations @Override

permits

back to summary

public boolean permits(Set<CryptoPrimitive> primitives, Key key)

Implements java.security.AlgorithmConstraints.permits.

Doc from java.security.AlgorithmConstraints.permits.

Determines whether a key is granted permission for the specified cryptographic primitives.

This method is usually used to check key size and key usage.

Annotations

@Override

permits	back to summary
public boolean permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Doc from java.security.AlgorithmConstraints.permits. Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives. Annotations @Override

permits

back to summary

public boolean permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters)

Implements java.security.AlgorithmConstraints.permits.

Doc from java.security.AlgorithmConstraints.permits.

Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives.

Annotations

@Override

permits	back to summary
pack-priv boolean permits(String algorithm, Set<SSLScope> scopes)

wrap back to summary

wrap	back to summary
pack-priv static SSLAlgorithmConstraints wrap(AlgorithmConstraints userSpecifiedConstraints) Returns a SSLAlgorithmConstraints instance that checks the provided `userSpecifiedConstraints` in addition to standard checks. Returns a singleton instance if parameter is null or DEFAULT. Parameters userSpecifiedConstraints:AlgorithmConstraints additional constraints to check Returns:SSLAlgorithmConstraints a SSLAlgorithmConstraints instance

pack-priv static SSLAlgorithmConstraints wrap(AlgorithmConstraints userSpecifiedConstraints)

Returns a SSLAlgorithmConstraints instance that checks the provided userSpecifiedConstraints in addition to standard checks. Returns a singleton instance if parameter is null or DEFAULT.

Parameters

userSpecifiedConstraints:AlgorithmConstraints: additional constraints to check

Returns:SSLAlgorithmConstraints

a SSLAlgorithmConstraints instance

wrap	back to summary
private static SSLAlgorithmConstraints wrap(AlgorithmConstraints userSpecifiedConstraints, boolean withDefaultCertPathConstraints)

sun.security.ssl back to summary

public final Enum SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE

Class Inheritance

extends Enum<SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE>

java.lang.Object
java.lang.Enum
sun.security.ssl.SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE

Field Summary

Modifier and Type	Field and Description
public static final SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE	LOCAL
public static final SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE	PEER

Constructor Summary

Access	Constructor and Description
private	SIGNATURE_CONSTRAINTS_MODE()

Method Summary

Modifier and Type	Method and Description
public static SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE	valueOf(String name)
public static SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE[]	values()

Inherited from java.lang.Enum:: clone compareTo describeConstable equals finalize getDeclaringClass hashCode name ordinal toString valueOf

Field Detail

LOCAL	back to summary
public static final SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE LOCAL

PEER	back to summary
public static final SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE PEER

Constructor Detail

SIGNATURE_CONSTRAINTS_MODE	back to summary
private SIGNATURE_CONSTRAINTS_MODE()

Method Detail

valueOf	back to summary
public static SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE valueOf(String name)

values	back to summary
public static SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE[] values()

sun.security.ssl back to summary

private Class SSLAlgorithmConstraints.SupportedSignatureAlgorithmConstraints

Class Inheritance

extends Object
implements AlgorithmConstraints

java.lang.Object
sun.security.ssl.SSLAlgorithmConstraints.SupportedSignatureAlgorithmConstraints

All Implemented Interfaces

java.security.AlgorithmConstraints

Field Summary

Modifier and Type	Field and Description
private boolean	checksDisabled
private Set<String>	supportedAlgorithms
private List<SignatureScheme>	supportedSignatureSchemes

Constructor Summary

Access	Constructor and Description
pack-priv	SupportedSignatureAlgorithmConstraints(SSLSession session, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode)

Method Summary

Modifier and Type	Method and Description
private boolean	checkRsaSsaPssParams(String algorithm, Key key, AlgorithmParameters parameters)
public boolean	permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Determines whether an algorithm is granted permission for the specified cryptographic primitives.
public final boolean	permits(Set<CryptoPrimitive> primitives, Key key) Implements java.security.AlgorithmConstraints.permits. Determines whether a key is granted permission for the specified cryptographic primitives.
public final boolean	permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

checksDisabled	back to summary
private boolean checksDisabled

supportedAlgorithms	back to summary
private Set<String> supportedAlgorithms

supportedSignatureSchemes	back to summary
private List<SignatureScheme> supportedSignatureSchemes

Constructor Detail

SupportedSignatureAlgorithmConstraints	back to summary
pack-priv SupportedSignatureAlgorithmConstraints(SSLSession session, SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE mode)

Method Detail

checkRsaSsaPssParams	back to summary
private boolean checkRsaSsaPssParams(String algorithm, Key key, AlgorithmParameters parameters)

permits	back to summary
public boolean permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Doc from java.security.AlgorithmConstraints.permits. Determines whether an algorithm is granted permission for the specified cryptographic primitives. Annotations @Override

permits

back to summary

public boolean permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters)

Implements java.security.AlgorithmConstraints.permits.

Doc from java.security.AlgorithmConstraints.permits.

Determines whether an algorithm is granted permission for the specified cryptographic primitives.

Annotations

@Override

permits	back to summary
public final boolean permits(Set<CryptoPrimitive> primitives, Key key) Implements java.security.AlgorithmConstraints.permits. Doc from java.security.AlgorithmConstraints.permits. Determines whether a key is granted permission for the specified cryptographic primitives. This method is usually used to check key size and key usage. Annotations @Override

permits

back to summary

public final boolean permits(Set<CryptoPrimitive> primitives, Key key)

Implements java.security.AlgorithmConstraints.permits.

Doc from java.security.AlgorithmConstraints.permits.

Determines whether a key is granted permission for the specified cryptographic primitives.

This method is usually used to check key size and key usage.

Annotations

@Override

permits	back to summary
public final boolean permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters) Implements java.security.AlgorithmConstraints.permits. Doc from java.security.AlgorithmConstraints.permits. Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives. Annotations @Override

permits

back to summary

public final boolean permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters)

Implements java.security.AlgorithmConstraints.permits.

Doc from java.security.AlgorithmConstraints.permits.

Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives.

Annotations

@Override

pack-priv final Class SSLAlgorithmConstraints

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public final Enum SSLAlgorithmConstraints.SIGNATURE_CONSTRAINTS_MODE

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private Class SSLAlgorithmConstraints.SupportedSignatureAlgorithmConstraints

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail