Top Inners Fields Constructors Methods
org.apache.tomcat.util.net.openssl

public Class OpenSSLContext

extends Object
implements SSLContext
Class Inheritance
All Implemented Interfaces
org.apache.tomcat.util.net.SSLContext
Imports
java.io.BufferedReader, .FileInputStream, .InputStreamReader, java.lang.ref.Cleaner, .Cleaner.Cleanable, java.nio.charset.StandardCharsets, java.security.PrivateKey, .SecureRandom, java.security.cert.CertificateException, .CertificateFactory, .X509Certificate, java.util.ArrayList, .Arrays, .Base64, .Iterator, .List, javax.net.ssl.KeyManager, .SSLEngine, .SSLException, .SSLParameters, .SSLServerSocketFactory, .SSLSessionContext, .TrustManager, .X509KeyManager, .X509TrustManager, org.apache.juli.logging.Log, .LogFactory, org.apache.tomcat.jni.CertificateVerifier, .Pool, .SSL, .SSLConf, .SSLContext, org.apache.tomcat.util.net.Constants, .SSLHostConfig, .SSLHostConfig.CertificateVerification, .SSLHostConfigCertificate, .SSLHostConfigCertificate.Type, .SSLUtilBase, org.apache.tomcat.util.res.StringManager

Nested and Inner Type Summary

Modifier and TypeClass and Description
private static class
OpenSSLContext.OpenSSLState

Field Summary

Modifier and TypeField and Description
private static final String
BEGIN_KEY

private final SSLHostConfigCertificate
certificate

private final Cleaner.Cleanable
cleanable

private static final Cleaner
cleaner

private static final String
defaultProtocol

private String
enabledProtocol

private static final Object
END_KEY

private boolean
initialized

private static final Log
log

private final List<String>
negotiableProtocols

private OpenSSLSessionContext
sessionContext

private static final StringManager
sm

private final SSLHostConfig
sslHostConfig

private final OpenSSLContext.OpenSSLState
state

pack-priv static final CertificateFactory
X509_CERT_FACTORY

private X509TrustManager
x509TrustManager

Constructor Summary

AccessConstructor and Description
public
OpenSSLContext(SSLHostConfigCertificate certificate, List<String> negotiableProtocols)

Method Summary

Modifier and TypeMethod and Description
public void
addCertificate(SSLHostConfigCertificate certificate)

protected static boolean
applyConf(OpenSSLConf conf, long cctx, long ctx)

private static X509Certificate[]
certificates(byte[][] chain)

protected static boolean
checkConf(OpenSSLConf conf, long cctx)

private static X509TrustManager
chooseTrustManager(TrustManager[] managers)

public SSLEngine
createSSLEngine()

Implements org.apache.tomcat.util.net.SSLContext.createSSLEngine.

public void
destroy()

Implements org.apache.tomcat.util.net.SSLContext.destroy.

private static String
findAlias(X509KeyManager keyManager, SSLHostConfigCertificate certificate)

public X509Certificate[]
getAcceptedIssuers()

Implements org.apache.tomcat.util.net.SSLContext.getAcceptedIssuers.

public X509Certificate[]
getCertificateChain(String alias)

Implements org.apache.tomcat.util.net.SSLContext.getCertificateChain.

private static int
getCertificateIndex(SSLHostConfigCertificate certificate)

public String
getEnabledProtocol()

public SSLSessionContext
getServerSessionContext()

Implements org.apache.tomcat.util.net.SSLContext.getServerSessionContext.

public SSLServerSocketFactory
getServerSocketFactory()

Implements org.apache.tomcat.util.net.SSLContext.getServerSocketFactory.

pack-priv long
getSSLContextID()

public SSLParameters
getSupportedSSLParameters()

Implements org.apache.tomcat.util.net.SSLContext.getSupportedSSLParameters.

public void
init(KeyManager[]
Must contain a KeyManager of the type OpenSSLKeyManager
kms, TrustManager[]
Must contain a TrustManager of the type X509TrustManager
tms, SecureRandom
Is not used for this implementation.
sr)

Implements org.apache.tomcat.util.net.SSLContext.init.

Setup the SSL_CTX.

public void
setEnabledProtocol(String protocol)

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

BEGIN_KEYback to summary
private static final String BEGIN_KEY
certificateback to summary
private final SSLHostConfigCertificate certificate
cleanableback to summary
private final Cleaner.Cleanable cleanable
cleanerback to summary
private static final Cleaner cleaner
defaultProtocolback to summary
private static final String defaultProtocol
enabledProtocolback to summary
private String enabledProtocol
END_KEYback to summary
private static final Object END_KEY
initializedback to summary
private boolean initialized
logback to summary
private static final Log log
negotiableProtocolsback to summary
private final List<String> negotiableProtocols
sessionContextback to summary
private OpenSSLSessionContext sessionContext
smback to summary
private static final StringManager sm
sslHostConfigback to summary
private final SSLHostConfig sslHostConfig
stateback to summary
private final OpenSSLContext.OpenSSLState state
X509_CERT_FACTORYback to summary
pack-priv static final CertificateFactory X509_CERT_FACTORY
x509TrustManagerback to summary
private X509TrustManager x509TrustManager

Constructor Detail

OpenSSLContextback to summary
public OpenSSLContext(SSLHostConfigCertificate certificate, List<String> negotiableProtocols) throws SSLException

Method Detail

addCertificateback to summary
public void addCertificate(SSLHostConfigCertificate certificate) throws Exception
applyConfback to summary
protected static boolean applyConf(OpenSSLConf conf, long cctx, long ctx) throws Exception
certificatesback to summary
private static X509Certificate[] certificates(byte[][] chain)
checkConfback to summary
protected static boolean checkConf(OpenSSLConf conf, long cctx) throws Exception
chooseTrustManagerback to summary
private static X509TrustManager chooseTrustManager(TrustManager[] managers)
createSSLEngineback to summary
public SSLEngine createSSLEngine()

Implements org.apache.tomcat.util.net.SSLContext.createSSLEngine.

Annotations
@Override
destroyback to summary
public void destroy()

Implements org.apache.tomcat.util.net.SSLContext.destroy.

Annotations
@Override
findAliasback to summary
private static String findAlias(X509KeyManager keyManager, SSLHostConfigCertificate certificate)
getAcceptedIssuersback to summary
public X509Certificate[] getAcceptedIssuers()

Implements org.apache.tomcat.util.net.SSLContext.getAcceptedIssuers.

Annotations
@Override
getCertificateChainback to summary
public X509Certificate[] getCertificateChain(String alias)

Implements org.apache.tomcat.util.net.SSLContext.getCertificateChain.

Annotations
@Override
getCertificateIndexback to summary
private static int getCertificateIndex(SSLHostConfigCertificate certificate)
getEnabledProtocolback to summary
public String getEnabledProtocol()
getServerSessionContextback to summary
public SSLSessionContext getServerSessionContext()

Implements org.apache.tomcat.util.net.SSLContext.getServerSessionContext.

Annotations
@Override
getServerSocketFactoryback to summary
public SSLServerSocketFactory getServerSocketFactory()

Implements org.apache.tomcat.util.net.SSLContext.getServerSocketFactory.

Annotations
@Override
getSSLContextIDback to summary
pack-priv long getSSLContextID()
getSupportedSSLParametersback to summary
public SSLParameters getSupportedSSLParameters()

Implements org.apache.tomcat.util.net.SSLContext.getSupportedSSLParameters.

Annotations
@Override
initback to summary
public void init(KeyManager[] kms, TrustManager[] tms, SecureRandom sr)

Implements org.apache.tomcat.util.net.SSLContext.init.

Setup the SSL_CTX.

Parameters
kms:KeyManager[]

Must contain a KeyManager of the type OpenSSLKeyManager

tms:TrustManager[]

Must contain a TrustManager of the type X509TrustManager

sr:SecureRandom

Is not used for this implementation.

Annotations
@Override
setEnabledProtocolback to summary
public void setEnabledProtocol(String protocol)
org.apache.tomcat.util.net.openssl back to summary

private Class OpenSSLContext.OpenSSLState

extends Object
implements Runnable
Class Inheritance
  • java.lang.Object
  • org.apache.tomcat.util.net.openssl.OpenSSLContext.OpenSSLState
All Implemented Interfaces
java.lang.Runnable

Field Summary

Modifier and TypeField and Description
pack-priv final long
aprPool

pack-priv final long
cctx

pack-priv final long
ctx

Constructor Summary

AccessConstructor and Description
private
OpenSSLState(long aprPool, long cctx, long ctx)

Method Summary

Modifier and TypeMethod and Description
public void
run()

Implements java.lang.Runnable.run.

Runs this operation.

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

aprPoolback to summary
pack-priv final long aprPool
cctxback to summary
pack-priv final long cctx
ctxback to summary
pack-priv final long ctx

Constructor Detail

OpenSSLStateback to summary
private OpenSSLState(long aprPool, long cctx, long ctx)

Method Detail

runback to summary
public void run()

Implements java.lang.Runnable.run.

Doc from java.lang.Runnable.run.

Runs this operation.

Annotations
@Override