Package io.netty.handler.ssl
package io.netty.handler.ssl
-
ClassDescriptionEnables SNI (Server Name Indication) extension for server side SSL.Provides an
SSLEngineagnostic way to configure aApplicationProtocolNegotiator.Defines which application level protocol negotiation to use.Defines the most common behaviors for the peer which is notified of the selected protocol.Defines the most common behaviors for the peer that selects the application protocol.Provides a set of protocol names used in ALPN and NPN.Configures aChannelPipelinedepending on the application-level protocol negotiation result ofSslHandler.Deprecated.Cipher suitesConverts a Java cipher suite string to an OpenSSL cipher suite string and vice versa.Provides a means to filter the supplied cipher suite based upon the supported and default cipher suites.Indicates the state of theSSLEnginewith respect to client authentication.Adapter class which allows to wrap anotherSslContextand initSSLEngineinstances.This class will not do any filtering of ciphers suites.Deprecated.Deprecated.A listener to be notified by which protocol was select by its peer.Factory interface forJdkApplicationProtocolNegotiator.ProtocolSelectionListenerobjects.Interface to define the role of an application protocol selector in the SSL handshake process.Factory interface forJdkApplicationProtocolNegotiator.ProtocolSelectorobjects.Abstract factory pattern for wrapping anSSLEngineobject.Deprecated.Deprecated.AnSslContextwhich uses JDK's SSL/TLS implementation.Deprecated.SpecialSSLExceptionwhich will get thrown if a packet is received that not looks like a TLS/SSL record.Tells ifnetty-tcnativeand its OpenSSL support are available.Deprecated.Wraps anotherKeyManagerFactoryand caches its chains / certs for an alias for better performance when usingSslProvider.OPENSSLorSslProvider.OPENSSL_REFCNT.Provides compression and decompression implementations for TLS Certificate Compression (RFC 8879).Configuration for TLS1.3 certificate compression extension.The configuration for algorithm.The usage mode of theOpenSslCertificateCompressionAlgorithm.Builder for anOpenSslCertificateCompressionAlgorithm.A specialCertificateExceptionwhich allows to specify which error code is included in the SSL Record.A client-sideSslContextwhich uses OpenSSL's SSL/TLS implementation.This class will use a finalizer to ensure native resources are automatically cleaned up.Deprecated.Implements aSSLEngineusing OpenSSL BIO abstractions.Deprecated.Allow to customize private key signing / decrypting (when using RSA).A server-sideSslContextwhich uses OpenSSL's SSL/TLS implementation.OpenSslSessionContextimplementation which offers extra methods which are only useful for the server-side.SSLSessionsub-type that is used by our native implementation.OpenSSL specificSSLSessionContextimplementation.Stats exposed by an OpenSSL session context.Session Ticket KeySpecialKeyManagerFactorythat pre-compute the keymaterial used whenSslProvider.OPENSSLorSslProvider.OPENSSL_REFCNTis used and so will improve handshake times and its performance.OptionalSslHandleris a utility decoder to support both SSL and non-SSL handlers based on the first message received.This is a special purpose implementation of aPrivateKeywhich allows the user to pass PEM/PKCS#8 encoded key material straight intoOpenSslContextwithout having to parse and re-encode bytes in Java land.This is a special purpose implementation of aX509Certificatewhich allows the user to pass PEM/PKCS#8 encoded data straight intoOpenSslContextwithout having to parse and re-encode bytes in Java land.A client-sideSslContextwhich uses OpenSSL's SSL/TLS implementation.An implementation ofSslContextwhich works with libraries that support the OpenSsl C library API.Implements aSSLEngineusing OpenSSL BIO abstractions.A server-sideSslContextwhich uses OpenSSL's SSL/TLS implementation.An interface thatTrustManagerinstances can implement, to be notified of resumed SSL sessions.Event that is fired once we did a selection of aSslContextbased on theSNI hostname, which may be because it was successful or there was an error.Enables SNI (Server Name Indication) extension for server side SSL.ByteToMessageDecoderwhich allows to be notified once a fullClientHellowas received.Event that is fired once the close_notify was received or if an failure happens before it was received.SSLExceptionwhich signals that the exception was caused by anSSLEnginewhich was closed already.A secure socket protocol implementation which acts as a factory forSSLEngineandSslHandler.Builder for configuring a new SslContext for creation.ASslContextOptionallows to configure aSslContextin a type-safe way.Event that is fired once the SSL handshake is complete, which may be because it was successful or there was an error.SSLHandshakeExceptionthat is used when a handshake failed due a configured timeout.TheSslMasterKeyHandleris a channel-handler you can include in your pipeline to consume the master key invalid input: '&' session identifier for a TLS session.SSL/TLS protocolsAn enumeration of SSL/TLS protocol providers.This class will filter all requested ciphers out that are not supported by the currentSSLEngine.
ApplicationProtocolConfig