org.glassfish.admin.mbeanserver.ssl
Class SSLParams

java.lang.Object
  org.glassfish.admin.mbeanserver.ssl.SSLParams

public class SSLParams
extends java.lang.Object

This class is a config holder for configuring SSL Sockets. It comes with set of defaults as defined below TrustAlgorithm = SunX509 keystore type = JKS truststore type = JKS protocol = TLS ssl3 Enabled = true tls Enabled= true It also picks up the value of keystore, keystore password, truststore , trustore password from system properties. Usage : This class can be used in any enviroment , where one wants to pass in SSL defaults programatically as well as use a default set of configuration without setting in values explicitly.

Author:

prasads@dev.java.net

Constructor Summary

SSLParams()

SSLParams(java.io.File truststore, java.lang.String trustStorePwd, java.lang.String trustStoreType)

Method Summary

java.lang.String	getCertNickname()
java.lang.String	getClientAuth() Determines if if the engine will request (want) or require (need) client authentication.
java.lang.String	getClientAuthEnabled() Determines whether SSL3 client authentication is performed on every request, independent of ACL-based access control.
java.lang.String	getCrlFile()
java.lang.String[]	getEnabledCiphers()
java.lang.String[]	getEnabledProtocols()
java.lang.String	getKeyAlgorithm()
java.io.File	getKeyStore()
java.lang.String	getKeyStorePassword()
java.lang.String	getKeyStoreType() type of the keystore file
java.lang.String	getProtocol()
java.lang.String	getSsl2Ciphers() A comma-separated list of the SSL2 ciphers used, with the prefix + to enable or - to disable, for example +rc4.
java.lang.Boolean	getSsl2Enabled() Determines whether SSL2 is enabled.
java.lang.Boolean	getSsl3Enabled() Determines whether SSL3 is enabled.
java.lang.String	getSsl3TlsCiphers() A comma-separated list of the SSL3 ciphers used, with the prefix + to enable or - to disable, for example +SSL_RSA_WITH_RC4_128_MD5.
java.lang.Boolean	getTlsEnabled() Determines whether TLS is enabled.
java.lang.Boolean	getTlsRollbackEnabled() Determines whether TLS rollback is enabled.
java.lang.String	getTrustAlgorithm()
java.io.File	getTrustStore()
java.lang.String	getTrustStorePassword()
java.lang.String	getTrustStoreType()
void	setCertNickname(java.lang.String certNickname)
void	setClientAuth(java.lang.String clientAuth)
void	setClientAuthEnabled(java.lang.String clientAuthEnabled)
void	setCrlFile(java.lang.String crlFile)
void	setEnabledCiphers(java.lang.String[] enabledCiphers)
void	setEnabledProtocols(java.lang.String[] enabledProtocols)
void	setKeyAlgorithm(java.lang.String algorithm)
void	setKeyStore(java.lang.String location)
void	setKeyStorePassword(java.lang.String password)
void	setKeyStoreType(java.lang.String type)
void	setProtocol(java.lang.String protocol)
void	setSsl2Ciphers(java.lang.String ssl2Ciphers)
void	setSsl2Enabled(java.lang.String ssl2Enabled)
void	setSsl3Enabled(java.lang.String ssl3Enabled)
void	setSsl3TlsCiphers(java.lang.String ssl3TlsCiphers)
void	setTlsEnabled(java.lang.String tlsEnabled)
void	setTlsRollbackEnabled(java.lang.String tlsRollBackEnabled)
void	setTrustAlgorithm(java.lang.String algorithm)
void	setTrustMaxCertLength(java.lang.String maxLength)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SSLParams

public SSLParams(java.io.File truststore,
                 java.lang.String trustStorePwd,
                 java.lang.String trustStoreType)

SSLParams

public SSLParams()

Method Detail

getTrustStore

public java.io.File getTrustStore()

getTrustStorePassword

public java.lang.String getTrustStorePassword()

getTrustStoreType

public java.lang.String getTrustStoreType()

getTrustAlgorithm

public java.lang.String getTrustAlgorithm()

setTrustAlgorithm

public void setTrustAlgorithm(java.lang.String algorithm)

getEnabledCiphers

public java.lang.String[] getEnabledCiphers()

setEnabledCiphers

public void setEnabledCiphers(java.lang.String[] enabledCiphers)

getEnabledProtocols

public java.lang.String[] getEnabledProtocols()

setEnabledProtocols

public void setEnabledProtocols(java.lang.String[] enabledProtocols)

getProtocol

public java.lang.String getProtocol()

setProtocol

public void setProtocol(java.lang.String protocol)

setTrustMaxCertLength

public void setTrustMaxCertLength(java.lang.String maxLength)

getCertNickname

public java.lang.String getCertNickname()

setCertNickname

public void setCertNickname(java.lang.String certNickname)

getClientAuthEnabled

public java.lang.String getClientAuthEnabled()

Determines whether SSL3 client authentication is performed on every request, independent of ACL-based access control.

setClientAuthEnabled

public void setClientAuthEnabled(java.lang.String clientAuthEnabled)

getClientAuth

public java.lang.String getClientAuth()

Determines if if the engine will request (want) or require (need) client authentication. Valid values: want, need, or left blank

setClientAuth

public void setClientAuth(java.lang.String clientAuth)

getCrlFile

public java.lang.String getCrlFile()

setCrlFile

public void setCrlFile(java.lang.String crlFile)

getKeyAlgorithm

public java.lang.String getKeyAlgorithm()

setKeyAlgorithm

public void setKeyAlgorithm(java.lang.String algorithm)

getKeyStoreType

public java.lang.String getKeyStoreType()

type of the keystore file

setKeyStoreType

public void setKeyStoreType(java.lang.String type)

getKeyStorePassword

public java.lang.String getKeyStorePassword()

setKeyStorePassword

public void setKeyStorePassword(java.lang.String password)

getKeyStore

public java.io.File getKeyStore()

setKeyStore

public void setKeyStore(java.lang.String location)

getSsl2Ciphers

public java.lang.String getSsl2Ciphers()

A comma-separated list of the SSL2 ciphers used, with the prefix + to enable or - to disable, for example +rc4. Allowed values are rc4, rc4export, rc2, rc2export, idea, des, desede3. If no value is specified, all supported ciphers are assumed to be enabled. NOT Used in PE

setSsl2Ciphers

public void setSsl2Ciphers(java.lang.String ssl2Ciphers)

getSsl2Enabled

public java.lang.Boolean getSsl2Enabled()

Determines whether SSL2 is enabled. NOT Used in PE. SSL2 is not supported by either iiop or web-services. When this element is used as a child of the iiop-listener element then the only allowed value for this attribute is "false".

setSsl2Enabled

public void setSsl2Enabled(java.lang.String ssl2Enabled)

getSsl3Enabled

public java.lang.Boolean getSsl3Enabled()

Determines whether SSL3 is enabled. If both SSL2 and SSL3 are enabled for a virtual server, the server tries SSL3 encryption first. If that fails, the server tries SSL2 encryption.

setSsl3Enabled

public void setSsl3Enabled(java.lang.String ssl3Enabled)

getSsl3TlsCiphers

public java.lang.String getSsl3TlsCiphers()

A comma-separated list of the SSL3 ciphers used, with the prefix + to enable or - to disable, for example +SSL_RSA_WITH_RC4_128_MD5. Allowed SSL3/TLS values are those that are supported by the JVM for the given security provider and security service configuration. If no value is specified, all supported ciphers are assumed to be enabled.

setSsl3TlsCiphers

public void setSsl3TlsCiphers(java.lang.String ssl3TlsCiphers)

getTlsEnabled

public java.lang.Boolean getTlsEnabled()

Determines whether TLS is enabled.

setTlsEnabled

public void setTlsEnabled(java.lang.String tlsEnabled)

getTlsRollbackEnabled

public java.lang.Boolean getTlsRollbackEnabled()

Determines whether TLS rollback is enabled. TLS rollback should be enabled for Microsoft Internet Explorer 5.0 and 5.5. NOT Used in PE

setTlsRollbackEnabled

public void setTlsRollbackEnabled(java.lang.String tlsRollBackEnabled)