Package org.forgerock.openig.tools

Class ServerTlsOptions

java.lang.Object

org.forgerock.openig.tools.ClientTlsOptions

org.forgerock.openig.tools.ServerTlsOptions

public class ServerTlsOptions
extends ClientTlsOptions

Extension to ClientTlsOptions supporting client authentication configuration used to drive the authentication negotiation between the client and IG.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ServerTlsOptions.ClientAuthentication	Enum representing the client authentication configuration options driving authentication negotiations between IG and the client.

Constructor Summary

Constructors

Constructor	Description
ServerTlsOptions(String algorithm, KeyManager[] managers, TrustManager[] trustManagers, List<String> ciphers, List<String> protocols, boolean enableAlpn, ServerTlsOptions.ClientAuthentication clientAuth)	Constructs TLS options with provided values.

Method Summary

Modifier and Type	Method	Description
ServerTlsOptions.ClientAuthentication	getClientAuthentication()	Return the configured ServerTlsOptions.ClientAuthentication required.

Methods inherited from class org.forgerock.openig.tools.ClientTlsOptions

getAlgorithm, getCipherSuitesArray, getCipherSuitesList, getEnabledProtocolsArray, getEnabledProtocolsList, getKeyManagers, getTrustManagers, isAlpnEnabled

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ServerTlsOptions

public ServerTlsOptions(String algorithm,
                        KeyManager[] managers,
                        TrustManager[] trustManagers,
                        List<String> ciphers,
                        List<String> protocols,
                        boolean enableAlpn,
                        ServerTlsOptions.ClientAuthentication clientAuth)

Constructs TLS options with provided values.

Parameters:

algorithm - SSL algorithm (not null)

managers - array of KeyManager (may be null)

trustManagers - array of TrustManager (may be null)

ciphers - list of cipher suites to be enabled (may be empty for JVM default)

protocols - list of protocols to be enabled (may be empty for JVM default)

enableAlpn - enable the ALPN TLS extension

clientAuth - required level of client authentication (not null)

Method Detail

getClientAuthentication

public ServerTlsOptions.ClientAuthentication getClientAuthentication()

Return the configured ServerTlsOptions.ClientAuthentication required.

Returns:

the client authentication