org.jivesoftware.smack.util

Class TLSUtils

java.lang.Object

org.jivesoftware.smack.util.TLSUtils

public class TLSUtils
extends java.lang.Object

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	TLSUtils.AcceptAllTrustManager A X509TrustManager that doesn't validate X.509 certificates.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	PROTO_SSL3
static java.lang.String	PROTO_TLSV1
static java.lang.String	PROTO_TLSV1_1
static java.lang.String	PROTO_TLSV1_2
static java.lang.String	SSL
static java.lang.String	TLS

Constructor Summary

Constructors

Constructor and Description
TLSUtils()

Method Summary

Methods

Modifier and Type	Method and Description
static <B extends ConnectionConfiguration.ConnectionConfigurationBuilder<B,?>> B	acceptAllCertificates(B builder) Accept all SSL/TLS certificates.
static void	setEnabledProtocolsAndCiphers(javax.net.ssl.SSLSocket sslSocket, java.lang.String[] enabledProtocols, java.lang.String[] enabledCiphers)
static <B extends ConnectionConfiguration.ConnectionConfigurationBuilder<B,?>> B	setSSLv3AndTLSOnly(B builder) Enable only TLS and SSLv3.
static <B extends ConnectionConfiguration.ConnectionConfigurationBuilder<B,?>> B	setTLSOnly(B builder) Enable only TLS.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SSL

public static final java.lang.String SSL

See Also:

Constant Field Values

TLS

public static final java.lang.String TLS

See Also:

Constant Field Values

PROTO_SSL3

public static final java.lang.String PROTO_SSL3

See Also:

Constant Field Values

PROTO_TLSV1

public static final java.lang.String PROTO_TLSV1

See Also:

Constant Field Values

PROTO_TLSV1_1

public static final java.lang.String PROTO_TLSV1_1

See Also:

Constant Field Values

PROTO_TLSV1_2

public static final java.lang.String PROTO_TLSV1_2

See Also:

Constant Field Values

Constructor Detail

TLSUtils

public TLSUtils()

Method Detail

setTLSOnly

public static <B extends ConnectionConfiguration.ConnectionConfigurationBuilder<B,?>> B setTLSOnly(B builder)

Enable only TLS. Connections created with the given ConnectionConfiguration will only support TLS.

According to the Encrypted XMPP Manifesto, TLSv1.2 shall be deployed, providing fallback support for SSLv3 and TLSv1.1. This method goes one step boyond and upgrades the handshake to use TLSv1 or better. This method requires the underlying OS to support all of TLSv1.2 , 1.1 and 1.0.

Parameters:

builder - the configuration builder to apply this setting to

setSSLv3AndTLSOnly

public static <B extends ConnectionConfiguration.ConnectionConfigurationBuilder<B,?>> B setSSLv3AndTLSOnly(B builder)

Enable only TLS and SSLv3. Connections created with the given ConnectionConfiguration will only support TLS and SSLv3.

According to the Encrypted XMPP Manifesto, TLSv1.2 shall be deployed, providing fallback support for SSLv3 and TLSv1.1.

Parameters:

builder - the configuration builder to apply this setting to

acceptAllCertificates

public static <B extends ConnectionConfiguration.ConnectionConfigurationBuilder<B,?>> B acceptAllCertificates(B builder)
                                                                                              throws java.security.NoSuchAlgorithmException,
                                                                                                     java.security.KeyManagementException

Accept all SSL/TLS certificates.

Warning Use with care. This method make the Connection use TLSUtils.AcceptAllTrustManager. Only use this method if you understand the implications.

Parameters:

builder -

Throws:

java.security.NoSuchAlgorithmException

java.security.KeyManagementException

setEnabledProtocolsAndCiphers

public static void setEnabledProtocolsAndCiphers(javax.net.ssl.SSLSocket sslSocket,
                                 java.lang.String[] enabledProtocols,
                                 java.lang.String[] enabledCiphers)
                                          throws SmackException.SecurityNotPossibleException

Throws:

SmackException.SecurityNotPossibleException