org.glassfish.jersey.client.innate.http

Class SSLParamConfigurator

java.lang.Object

org.glassfish.jersey.client.innate.http.SSLParamConfigurator

public final class SSLParamConfigurator
extends Object

A unified routines to configure SSLParameters. To be reused in connectors.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SSLParamConfigurator.Builder Builder of the SSLParamConfigurator instance.

Method Summary

Modifier and Type	Method and Description
static SSLParamConfigurator.Builder	builder() Create a new instance of TlsSupport class
String	getSNIHostName() Get the host name either set by the request URI or by HttpHeaders.HOST header if it differs from HTTP request host name.
URI	getSNIUri() Get the request URI or altered by HttpHeaders.HOST header.
boolean	isSNIRequired() Return true iff SNI is to be set, i.e.
void	setEndpointIdentificationAlgorithm(SSLEngine sslEngine) Set setEndpointIdentificationAlgorithm to HTTPS.
void	setSNIServerName(SSLEngine sslEngine) Set SNIServerName for the SSLParameters when SNI should be used (i.e.
void	setSNIServerName(SSLSocket sslSocket) Set SNIServerName for the SSLParameters when SNI should be used (i.e.
URI	toIPRequestUri() Replaces hostname within the ClientRequest uri with a resolved IP address.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

builder

public static SSLParamConfigurator.Builder builder()

Create a new instance of TlsSupport class

getSNIHostName

public String getSNIHostName()

Get the host name either set by the request URI or by HttpHeaders.HOST header if it differs from HTTP request host name.

Returns:

the hostName the SSLEngine is to use.

toIPRequestUri

public URI toIPRequestUri()

Replaces hostname within the ClientRequest uri with a resolved IP address. Should the hostname be not known, the original request URI is returned. The purpose of this method is to replace the host with the IP so that {code HttpUrlConnection} does not replace user defined SNIHostName with the host from the request uri.

Returns:

the request uri with ip address of the resolved host.

isSNIRequired

public boolean isSNIRequired()

Return true iff SNI is to be set, i.e. HttpHeaders.HOST header if it differs from HTTP request host name.

Returns:

Return true when SNIHostName is to be set.

getSNIUri

public URI getSNIUri()

Get the request URI or altered by HttpHeaders.HOST header.

Returns:

The possibly altered request URI.

See Also:

getSNIHostName()

setSNIServerName

public void setSNIServerName(SSLEngine sslEngine)

Set SNIServerName for the SSLParameters when SNI should be used (i.e. HttpHeaders.HOST differs from HTTP request host name)

Parameters:

sslEngine - the SSLEngine the SSLParameters are set for.

setSNIServerName

public void setSNIServerName(SSLSocket sslSocket)

Set SNIServerName for the SSLParameters when SNI should be used (i.e. HttpHeaders.HOST differs from HTTP request host name)

Parameters:

sslSocket - the SSLSocket the SSLParameters are set for.

setEndpointIdentificationAlgorithm

public void setEndpointIdentificationAlgorithm(SSLEngine sslEngine)

Set setEndpointIdentificationAlgorithm to HTTPS. This is to prevent man-in-the-middle attacks.

Parameters:

sslEngine - the SSLEngine the algorithm is set for.

See Also:

SSLParameters.setEndpointIdentificationAlgorithm(String)