Class ReferenceCountedOpenSslServerContext

java.lang.Object

io.netty.handler.ssl.SslContext

io.netty.handler.ssl.ReferenceCountedOpenSslContext

io.netty.handler.ssl.ReferenceCountedOpenSslServerContext

All Implemented Interfaces:

ReferenceCounted

public final class ReferenceCountedOpenSslServerContext
extends ReferenceCountedOpenSslContext

A server-side SslContext which uses OpenSSL's SSL/TLS implementation.

Instances of this class must be released or else native memory will leak!

Instances of this class must not be released before any ReferenceCountedOpenSslEngine which depends upon the instance of this class is released. Otherwise if any method of ReferenceCountedOpenSslEngine is called which uses this class's JNI resources the JVM may crash.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private static final class	ReferenceCountedOpenSslServerContext.ExtendedTrustManagerVerifyCallback
private static final class	ReferenceCountedOpenSslServerContext.OpenSslServerCertificateCallback
private static final class	ReferenceCountedOpenSslServerContext.OpenSslSniHostnameMatcher
private static final class	ReferenceCountedOpenSslServerContext.TrustManagerVerifyCallback

Nested classes/interfaces inherited from class ReferenceCountedOpenSslContext

ReferenceCountedOpenSslContext.AbstractCertificateVerifier

Field Summary

Fields

Modifier and Type	Field	Description
private static final InternalLogger	logger
private final OpenSslServerSessionContext	sessionContext

Fields inherited from class ReferenceCountedOpenSslContext

CLIENT_ENABLE_SESSION_CACHE, CLIENT_ENABLE_SESSION_TICKET, CLIENT_ENABLE_SESSION_TICKET_TLSV13, clientAuth, credentials, ctx, ctxLock, enableOcsp, endpointIdentificationAlgorithm, engines, groups, hasTLSv13Cipher, hasTmpDhKeys, keyCertChain, NONE_PROTOCOL_NEGOTIATOR, protocols, SERVER_ENABLE_SESSION_CACHE, SERVER_ENABLE_SESSION_TICKET, SERVER_ENABLE_SESSION_TICKET_TLSV13, serverNames, tlsFalseStart, USE_TASKS, VERIFY_DEPTH

Fields inherited from class SslContext

ALIAS, defaultEndpointVerificationAlgorithm, resumptionController, X509_CERT_FACTORY

Constructor Summary

Constructors

Constructor	Description
ReferenceCountedOpenSslServerContext(java.security.cert.X509Certificate[] trustCertCollection, javax.net.ssl.TrustManagerFactory trustManagerFactory, java.security.cert.X509Certificate[] keyCertChain, java.security.PrivateKey key, java.lang.String keyPassword, javax.net.ssl.KeyManagerFactory keyManagerFactory, java.lang.Iterable<java.lang.String> ciphers, CipherSuiteFilter cipherFilter, ApplicationProtocolConfig apn, long sessionCacheSize, long sessionTimeout, ClientAuth clientAuth, java.lang.String[] protocols, boolean startTls, boolean enableOcsp, java.lang.String keyStore, ResumptionController resumptionController, java.util.Map.Entry<SslContextOption<?>, java.lang.Object>[] options, java.util.List<OpenSslCredential> credentials)
ReferenceCountedOpenSslServerContext(java.security.cert.X509Certificate[] trustCertCollection, javax.net.ssl.TrustManagerFactory trustManagerFactory, java.security.cert.X509Certificate[] keyCertChain, java.security.PrivateKey key, java.lang.String keyPassword, javax.net.ssl.KeyManagerFactory keyManagerFactory, java.lang.Iterable<java.lang.String> ciphers, CipherSuiteFilter cipherFilter, OpenSslApplicationProtocolNegotiator apn, long sessionCacheSize, long sessionTimeout, ClientAuth clientAuth, java.lang.String[] protocols, boolean startTls, boolean enableOcsp, java.lang.String keyStore, ResumptionController resumptionController, java.util.Map.Entry<SslContextOption<?>, java.lang.Object>[] options, java.util.List<OpenSslCredential> credentials)

Method Summary

Modifier and Type	Method	Description
(package private) static OpenSslServerSessionContext	newSessionContext(ReferenceCountedOpenSslContext thiz, long ctx, OpenSslEngineMap engines, java.security.cert.X509Certificate[] trustCertCollection, javax.net.ssl.TrustManagerFactory trustManagerFactory, java.security.cert.X509Certificate[] keyCertChain, java.security.PrivateKey key, java.lang.String keyPassword, javax.net.ssl.KeyManagerFactory keyManagerFactory, java.lang.String keyStore, long sessionCacheSize, long sessionTimeout, ResumptionController resumptionController, boolean fallbackToJdkSignatureProviders)
OpenSslServerSessionContext	sessionContext()	Returns the SSLSessionContext object held by this context.
private static void	setVerifyCallback(long ctx, OpenSslEngineMap engines, javax.net.ssl.X509TrustManager manager)

Methods inherited from class ReferenceCountedOpenSslContext

applicationProtocolNegotiator, certChainToKeyManagerFactory, certificates, chooseTrustManager, chooseTrustManager, chooseX509KeyManager, cipherSuites, context, freeBio, getBioNonApplicationBufferSize, getRejectRemoteInitiatedRenegotiation, isClient, isJdkSignatureFallbackEnabled, maxCertificateListBytes, newEngine, newEngine, newEngine0, newHandler, newHandler, newHandler, newHandler, providerFor, refCnt, release, release, retain, retain, setBioNonApplicationBufferSize, setKeyMaterial, setPrivateKeyMethod, setRejectRemoteInitiatedRenegotiation, setTicketKeys, setupSecurityProviderSignatureSource, setUseTasks, sslCtxPointer, stats, toBIO, toBIO, toBIO, toNegotiator, touch, touch, useExtendedTrustManager

Methods inherited from class SslContext

attributes, buildKeyManagerFactory, buildKeyManagerFactory, buildKeyStore, buildTrustManagerFactory, buildTrustManagerFactory, buildTrustManagerFactory, defaultClientProvider, defaultServerProvider, deriveSessionIdContext, generateKeySpec, isServer, keyStorePassword, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContext, newClientContextInternal, newClientContextInternal, newHandler, newHandler, newHandler, newHandler, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContext, newServerContextInternal, nextProtocols, sessionCacheSize, sessionTimeout, toApplicationProtocolConfig, toPrivateKey, toPrivateKey, toPrivateKey, toPrivateKeyInternal, toX509Certificates, toX509Certificates, toX509CertificatesInternal

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

private static final InternalLogger logger

sessionContext

private final OpenSslServerSessionContext sessionContext

Constructor Details

ReferenceCountedOpenSslServerContext

ReferenceCountedOpenSslServerContext(java.security.cert.X509Certificate[] trustCertCollection,
 javax.net.ssl.TrustManagerFactory trustManagerFactory,
 java.security.cert.X509Certificate[] keyCertChain,
 java.security.PrivateKey key,
 java.lang.String keyPassword,
 javax.net.ssl.KeyManagerFactory keyManagerFactory,
 java.lang.Iterable<java.lang.String> ciphers,
 CipherSuiteFilter cipherFilter,
 ApplicationProtocolConfig apn,
 long sessionCacheSize,
 long sessionTimeout,
 ClientAuth clientAuth,
 java.lang.String[] protocols,
 boolean startTls,
 boolean enableOcsp,
 java.lang.String keyStore,
 ResumptionController resumptionController,
 java.util.Map.Entry<SslContextOption<?>, java.lang.Object>[] options,
 java.util.List<OpenSslCredential> credentials)
                              throws javax.net.ssl.SSLException

Throws:

javax.net.ssl.SSLException

ReferenceCountedOpenSslServerContext

ReferenceCountedOpenSslServerContext(java.security.cert.X509Certificate[] trustCertCollection,
 javax.net.ssl.TrustManagerFactory trustManagerFactory,
 java.security.cert.X509Certificate[] keyCertChain,
 java.security.PrivateKey key,
 java.lang.String keyPassword,
 javax.net.ssl.KeyManagerFactory keyManagerFactory,
 java.lang.Iterable<java.lang.String> ciphers,
 CipherSuiteFilter cipherFilter,
 OpenSslApplicationProtocolNegotiator apn,
 long sessionCacheSize,
 long sessionTimeout,
 ClientAuth clientAuth,
 java.lang.String[] protocols,
 boolean startTls,
 boolean enableOcsp,
 java.lang.String keyStore,
 ResumptionController resumptionController,
 java.util.Map.Entry<SslContextOption<?>, java.lang.Object>[] options,
 java.util.List<OpenSslCredential> credentials)
                              throws javax.net.ssl.SSLException

Throws:

javax.net.ssl.SSLException

Method Details

sessionContext

public OpenSslServerSessionContext sessionContext()

Description copied from class: SslContext

Returns the SSLSessionContext object held by this context.

Specified by:

sessionContext in class ReferenceCountedOpenSslContext

newSessionContext

static OpenSslServerSessionContext newSessionContext(ReferenceCountedOpenSslContext thiz,
 long ctx,
 OpenSslEngineMap engines,
 java.security.cert.X509Certificate[] trustCertCollection,
 javax.net.ssl.TrustManagerFactory trustManagerFactory,
 java.security.cert.X509Certificate[] keyCertChain,
 java.security.PrivateKey key,
 java.lang.String keyPassword,
 javax.net.ssl.KeyManagerFactory keyManagerFactory,
 java.lang.String keyStore,
 long sessionCacheSize,
 long sessionTimeout,
 ResumptionController resumptionController,
 boolean fallbackToJdkSignatureProviders)
                                              throws javax.net.ssl.SSLException

Throws:

javax.net.ssl.SSLException

setVerifyCallback

private static void setVerifyCallback(long ctx,
 OpenSslEngineMap engines,
 javax.net.ssl.X509TrustManager manager)