A B C D E F G H I K L M N O P R S T V X _
All Classes All Packages
All Classes All Packages
All Classes All Packages
A
- add(String) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
A convenience method to add a cipher suite by name.
- add(String) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Add the given protocol.
- add(EnumSet<Protocol>) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Add the given protocols.
- add(CipherSuitePredicate) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Add all cipher suites which are matched by the given predicate.
- add(Protocol) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Add the given protocol.
- add(Protocol...) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Add the given protocols.
- addMatch(String, SSLContext) - Method in class org.wildfly.security.ssl.SNIContextMatcher.Builder
- AEAD - org.wildfly.security.ssl.Digest
-
Deprecated.no longer used; refer to the actual digest algorithm instead.
- AES128 - org.wildfly.security.ssl.Encryption
-
AES encryption with 128-bit keys.
- AES128CCM - org.wildfly.security.ssl.Encryption
-
AES encryption with 128-bit keys in CBC-MAC Mode (CCM).
- AES128CCM8 - org.wildfly.security.ssl.Encryption
-
AES encryption with 128-bit keys in CBC-MAC Mode (CCM) with an 8-Octet Integrity Check Value.
- AES128GCM - org.wildfly.security.ssl.Encryption
-
AES encryption with 128-bit keys in Galois counter mode (GCM).
- AES256 - org.wildfly.security.ssl.Encryption
-
AES encryption with 256-bit keys.
- AES256CCM - org.wildfly.security.ssl.Encryption
-
AES encryption with 256-bit keys in CBC-MAC Mode (CCM).
- AES256CCM8 - org.wildfly.security.ssl.Encryption
-
AES encryption with 256-bit keys in CBC-MAC Mode (CCM) with an 8-Octet Integrity Check Value.
- AES256GCM - org.wildfly.security.ssl.Encryption
-
AES encryption with 256-bit keys in Galois counter mode (GCM).
- aggregate(CipherSuiteSelector, CipherSuiteSelector) - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Create an aggregate
CipherSuiteSelector. - aggregate(SSLContextSelector...) - Static method in interface org.wildfly.security.ssl.SSLContextSelector
-
Create an aggregate selector which executes each given selector in order until a match is found.
- aggregate(SSLContextSelector, SSLContextSelector) - Static method in interface org.wildfly.security.ssl.SSLContextSelector
-
Create an aggregate selector which executes each given selector in order until a match is found.
- ARIA128 - org.wildfly.security.ssl.Encryption
-
ARIA encryption with 128-bit.
- ARIA128GCM - org.wildfly.security.ssl.Encryption
-
ARIA encryption with 128-bit keys in Galois counter mode (GCM).
- ARIA256 - org.wildfly.security.ssl.Encryption
-
ARIA encryption with 256-bit keys.
- ARIA256GCM - org.wildfly.security.ssl.Encryption
-
ARIA encryption with 256-bit keys in Galois counter mode (GCM).
- Authentication - Enum in org.wildfly.security.ssl
-
The authentication type for SSL/TLS cipher suite selection.
B
- build() - Method in class org.wildfly.security.ssl.SNIContextMatcher.Builder
- build() - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Build a security factory for the new context.
- build() - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
- builder() - Static method in class org.wildfly.security.ssl.X509RevocationTrustManager
-
Create new X509RevocationTtustManager.Builder instance
- Builder() - Constructor for class org.wildfly.security.ssl.SNIContextMatcher.Builder
C
- CAMELLIA128 - org.wildfly.security.ssl.Encryption
-
Camellia encryption with 128-bit keys.
- CAMELLIA256 - org.wildfly.security.ssl.Encryption
-
Camellia encryption with 256-bit keys.
- CHACHA20 - org.wildfly.security.ssl.Encryption
-
ChaCha20 encryption.
- CHACHA20POLY1305 - Static variable in enum org.wildfly.security.ssl.Encryption
-
Deprecated.Use
Encryption.CHACHA20instead. - checkClientTrusted(X509Certificate[], String) - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- checkClientTrusted(X509Certificate[], String) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- checkClientTrusted(X509Certificate[], String, Socket) - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- checkClientTrusted(X509Certificate[], String, Socket) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- checkServerTrusted(X509Certificate[], String) - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- checkServerTrusted(X509Certificate[], String) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- checkServerTrusted(X509Certificate[], String, Socket) - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- checkServerTrusted(X509Certificate[], String, Socket) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- CipherSuitePredicate - Class in org.wildfly.security.ssl
-
An opaque predicate which can be used to match SSL/TLS cipher suites.
- CipherSuiteSelector - Class in org.wildfly.security.ssl
-
An immutable filter for SSL/TLS cipher suites.
- computeIfAbsent(SSLSession, String, Function<String, R>) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Get or compute the value for the given key, storing the computed value (if one is generated).
- configure(SSLContext) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- configure(SSLContext, SSLEngine) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- configure(SSLContext, SSLServerSocket) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- configure(SSLContext, SSLSocket) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- constantSelector(SSLContext) - Static method in interface org.wildfly.security.ssl.SSLContextSelector
-
Create a selector which always returns the same context.
- createConfiguredSslContext(SSLContext, SSLConfigurator) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create a configured SSL context from an outside SSL context.
- createConfiguredSslContext(SSLContext, SSLConfigurator, boolean) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create a configured SSL context from an outside SSL context.
- createConfiguredSslContextFactory(SecurityFactory<SSLContext>, SSLConfigurator) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create a configured SSL context factory from an outside SSL context.
- createDispatchingSSLEngineFactory(SSLContextSelector) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Get a factory which produces SSL engines which dispatch to the appropriate SSL context based on the information in the SSL greeting.
- createHostNamePredicateSNIMatcher(Predicate<SNIHostName>) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create an
SNIMatcherwhich matches SNI host names that satisfy the given predicate. - createHostNameStringPredicateSNIMatcher(Predicate<String>) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create an
SNIMatcherwhich matches SNI host name strings that satisfy the given predicate. - createHostNameStringSNIMatcher(String) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create an
SNIMatcherwhich matches SNI host names that are equal to the given (ASCII) string. - createHostNameSuffixSNIMatcher(String) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create an
SNIMatcherwhich matches SNI host name strings which end with the given suffix. - createSelectingSSLEngine(SSLContextSelector) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Get a server SSL engine which dispatches to the appropriate SSL context based on the information in the SSL greeting.
- createSelectingSSLEngine(SSLContextSelector, String, int) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Get a server SSL engine which dispatches to the appropriate SSL context based on the information in the SSL greeting.
- createSimpleSslContextFactory(String, Provider) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create a simple security factory for SSL contexts.
- createSslContextFactory(ProtocolSelector, Supplier<Provider[]>) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create an SSL context factory which locates the best context by searching the preferred providers in order using the rules established in the given protocol selector.
- createSslContextFactory(ProtocolSelector, Supplier<Provider[]>, String) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Create an SSL context factory which locates the best context by searching the preferred providers in order using the rules established in the given protocol selector.
D
- defaultProtocols() - Static method in class org.wildfly.security.ssl.ProtocolSelector
-
Get the default SSL protocol selector.
- deleteFully(String) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
A convenience method to permanently delete a cipher suite by name.
- deleteFully(String) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Permanently delete the given protocol.
- deleteFully(EnumSet<Protocol>) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Permanently delete all of the given protocols.
- deleteFully(CipherSuitePredicate) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Permanently delete all cipher suites which are matched by the given predicate.
- deleteFully(Protocol) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Permanently delete the given protocol.
- deleteFully(Protocol...) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Permanently delete all of the given protocols.
- DES - org.wildfly.security.ssl.Encryption
-
Simple DES encryption.
- DH - org.wildfly.security.ssl.Authentication
-
Diffie-Hellman key-based authentication.
- DHd - org.wildfly.security.ssl.KeyAgreement
-
Diffie-Hellman key agreement using DSS-signed keys.
- DHE - org.wildfly.security.ssl.KeyAgreement
-
Ephemeral Diffie-Hellman key agreement.
- DHEPSK - org.wildfly.security.ssl.KeyAgreement
-
Ephemeral Diffie-Hellman pre-shared key ("PSK") key agreement.
- DHr - org.wildfly.security.ssl.KeyAgreement
-
Diffie-Hellman key agreement using RSA-signed keys.
- Digest - Enum in org.wildfly.security.ssl
-
The digest algorithm type for SSL/TLS cipher suite selection.
- DSS - org.wildfly.security.ssl.Authentication
-
DSS key-based authentication.
E
- ECDH - org.wildfly.security.ssl.Authentication
-
Elliptic curve Diffie-Hellman key-based authentication.
- ECDHe - org.wildfly.security.ssl.KeyAgreement
-
Elliptic-curve Diffie-Hellman ("ECDH") key agreement using ECDH-signed keys.
- ECDHE - org.wildfly.security.ssl.KeyAgreement
-
Ephemeral elliptic-curve Diffie-Hellman key agreement.
- ECDHEPSK - org.wildfly.security.ssl.KeyAgreement
-
RSA pre-shared key ("PSK") key agreement.
- ECDHr - org.wildfly.security.ssl.KeyAgreement
-
Elliptic-curve Diffie-Hellman ("ECDH") key agreement using RSA-signed keys.
- ECDSA - org.wildfly.security.ssl.Authentication
-
Elliptic curve DSA key-based authentication.
- empty() - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Get the basic empty SSL cipher suite selector.
- empty() - Static method in class org.wildfly.security.ssl.ProtocolSelector
-
Get the basic empty SSL protocol selector.
- empty(boolean) - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Get the basic empty SSL cipher suite selector.
- Encryption - Enum in org.wildfly.security.ssl
-
The encryption type for SSL/TLS cipher suite selection.
- evaluate(String[]) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Evaluate this selector against the given list of JSSE supported mechanisms.
- evaluate(String[]) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Evaluate this selector against the given list of JSSE supported protocols.
- EXP40 - org.wildfly.security.ssl.SecurityLevel
- EXP56 - org.wildfly.security.ssl.SecurityLevel
F
- FIPS - org.wildfly.security.ssl.SecurityLevel
- forName(String) - Static method in enum org.wildfly.security.ssl.Protocol
-
Gets an enum item for given protocol name.
- fromNamesString(String) - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Create a cipher suite selector from the given OpenSSL-style TLSv1.3 cipher suites string.
- fromString(String) - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Create a cipher suite selector from the given OpenSSL-style cipher list string.
- FZA - org.wildfly.security.ssl.Authentication
-
Fortezza authentication.
- FZA - org.wildfly.security.ssl.Encryption
-
Fortezza encryption.
- FZA - org.wildfly.security.ssl.KeyAgreement
-
Fortezza key agreement.
G
- getAcceptedIssuers() - Method in class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.
- getAcceptedIssuers() - Method in class org.wildfly.security.ssl.X509RevocationTrustManager
- getCipherSuites() - Method in interface org.wildfly.security.ssl.SSLConnectionInformation
-
Get the list of cipher suites that the client has requested.
- getContext(List<SNIServerName>) - Method in class org.wildfly.security.ssl.SNIContextMatcher
-
Used for finding the matching servers from the server list.
- getDefaultContext() - Method in class org.wildfly.security.ssl.SNIContextMatcher.Builder
- getDefaultContext() - Method in class org.wildfly.security.ssl.SNIContextMatcher
- getDefaultSSLParameters(SSLContext, SSLParameters) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- getDefaultX509TrustManagerSecurityFactory() - Static method in class org.wildfly.security.ssl.SSLUtils
-
Get the platform's default X.509 trust manager security factory.
- getHelloVersion() - Method in interface org.wildfly.security.ssl.SSLConnectionInformation
-
Returns the hello version of an SSL/TLS connection.
- getOrDefault(SSLSession, String, Object) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Get the value of the given key from the SSL session, or a default value if the key is not set.
- getProtocols() - Method in interface org.wildfly.security.ssl.SSLConnectionInformation
-
Get the ALPN protocol names of this connection (if any).
- getRecordVersion() - Method in interface org.wildfly.security.ssl.SSLConnectionInformation
-
Returns the record version of an SSL/TLS connection.
- getSNIServerNames() - Method in interface org.wildfly.security.ssl.SSLConnectionInformation
-
Get the SNI server names of this connection (if any)
- getSupportedSSLParameters(SSLContext, SSLParameters) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- GOST - org.wildfly.security.ssl.KeyAgreement
-
VKA 34.10 key agreement as per RFC 4357.
- GOST01 - org.wildfly.security.ssl.Authentication
-
GOST R 34.10-2001 authentication.
- GOST2814789CNT - org.wildfly.security.ssl.Encryption
-
GOST 28147-89 encryption as defined in RFC 5830.
- GOST89MAC - org.wildfly.security.ssl.Digest
-
The GOST 28147-89 (MAC, not HMAC) digest algorithm.
- GOST94 - org.wildfly.security.ssl.Authentication
-
GOST R 34.10-94 authentication.
- GOST94 - org.wildfly.security.ssl.Digest
-
The GOST R 34.11-94 (HMAC) digest algorithm.
H
- HIGH - org.wildfly.security.ssl.SecurityLevel
I
- IDEA - org.wildfly.security.ssl.Encryption
-
IDEA encryption.
- in(Authentication...) - Method in enum org.wildfly.security.ssl.Authentication
-
Determine whether this instance is equal to one of the given instances.
- in(Authentication, Authentication) - Method in enum org.wildfly.security.ssl.Authentication
-
Determine whether this instance is equal to one of the given instances.
- in(Authentication, Authentication, Authentication) - Method in enum org.wildfly.security.ssl.Authentication
-
Determine whether this instance is equal to one of the given instances.
- in(Digest...) - Method in enum org.wildfly.security.ssl.Digest
-
Determine whether this instance is equal to one of the given instances.
- in(Digest, Digest) - Method in enum org.wildfly.security.ssl.Digest
-
Determine whether this instance is equal to one of the given instances.
- in(Digest, Digest, Digest) - Method in enum org.wildfly.security.ssl.Digest
-
Determine whether this instance is equal to one of the given instances.
- in(Encryption...) - Method in enum org.wildfly.security.ssl.Encryption
-
Determine whether this instance is equal to one of the given instances.
- in(Encryption, Encryption) - Method in enum org.wildfly.security.ssl.Encryption
-
Determine whether this instance is equal to one of the given instances.
- in(Encryption, Encryption, Encryption) - Method in enum org.wildfly.security.ssl.Encryption
-
Determine whether this instance is equal to one of the given instances.
- in(KeyAgreement...) - Method in enum org.wildfly.security.ssl.KeyAgreement
-
Determine whether this instance is equal to one of the given instances.
- in(KeyAgreement, KeyAgreement) - Method in enum org.wildfly.security.ssl.KeyAgreement
-
Determine whether this instance is equal to one of the given instances.
- in(KeyAgreement, KeyAgreement, KeyAgreement) - Method in enum org.wildfly.security.ssl.KeyAgreement
-
Determine whether this instance is equal to one of the given instances.
- in(Protocol...) - Method in enum org.wildfly.security.ssl.Protocol
-
Determine whether this instance is equal to one of the given instances.
- in(Protocol, Protocol) - Method in enum org.wildfly.security.ssl.Protocol
-
Determine whether this instance is equal to one of the given instances.
- in(Protocol, Protocol, Protocol) - Method in enum org.wildfly.security.ssl.Protocol
-
Determine whether this instance is equal to one of the given instances.
- isFull(EnumSet<Authentication>) - Static method in enum org.wildfly.security.ssl.Authentication
-
Determine whether the given set is "full" (meaning it contains all possible values).
- isFull(EnumSet<Digest>) - Static method in enum org.wildfly.security.ssl.Digest
-
Determine whether the given set is "full" (meaning it contains all possible values).
- isFull(EnumSet<Encryption>) - Static method in enum org.wildfly.security.ssl.Encryption
-
Determine whether the given set is "full" (meaning it contains all possible values).
- isFull(EnumSet<KeyAgreement>) - Static method in enum org.wildfly.security.ssl.KeyAgreement
-
Determine whether the given set is "full" (meaning it contains all possible values).
- isFull(EnumSet<Protocol>) - Static method in enum org.wildfly.security.ssl.Protocol
-
Determine whether the given set is "full" (meaning it contains all possible values).
K
- KeyAgreement - Enum in org.wildfly.security.ssl
-
The key agreement type for SSL/TLS cipher suite selection.
- KRB5 - org.wildfly.security.ssl.Authentication
-
Kerberos V5 authentication.
- KRB5 - org.wildfly.security.ssl.KeyAgreement
-
Kerberos V5 key agreement.
L
- LOW - org.wildfly.security.ssl.SecurityLevel
M
- matchAll(CipherSuitePredicate...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all of the given predicates.
- matchAnonDH() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all anonymous ciphers which use Diffie-Hellman key exchange.
- matchAny(CipherSuitePredicate...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match any of the given predicates.
- matchAuthentication(EnumSet<Authentication>) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given authentication schemes.
- matchAuthentication(Authentication) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches the given authentication scheme.
- matchAuthentication(Authentication...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given authentication schemes.
- matchDefaultDeletes() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches all cipher suites that would be fully deleted in the default selector configuration.
- matchDigest(EnumSet<Digest>) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given digest schemes.
- matchDigest(Digest) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches the given digest scheme.
- matchDigest(Digest...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given digest schemes.
- matchEncryption(EnumSet<Encryption>) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given encryption schemes.
- matchEncryption(Encryption) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches the given encryption scheme.
- matchEncryption(Encryption...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given encryption schemes.
- matchExport() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches all exportable cipher suites.
- matchFalse() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match no possible cipher suites.
- matchFips() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches all FIPS cipher suites.
- matchKeyAgreement(KeyAgreement) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches the given key exchange scheme.
- matchKeyExchange(EnumSet<KeyAgreement>) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given key exchange schemes.
- matchKeyExchange(KeyAgreement...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given key exchange schemes.
- matchLevel(EnumSet<SecurityLevel>) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given security levels.
- matchLevel(SecurityLevel) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches the given security level.
- matchLevel(SecurityLevel...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given security levels.
- matchLevelLessThan(SecurityLevel) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches all security levels less than the given level.
- matchName(String) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches a cipher suite with the given name.
- matchNonExport() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches all non-exportable cipher suites.
- matchNonFips() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches all non-FIPS cipher suites.
- matchNot(CipherSuitePredicate) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Invert the given predicate.
- matchOpenSslAll() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all cipher suites except for anonymous and encryptionless suites, which must be explicitly enabled.
- matchOpenSslComplementOfAll() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all cipher suites included by
CipherSuitePredicate.matchOpenSslAll()but are disabled by default (generally, anonymous Diffie-Hellman suites including elliptic curve suites). - matchOpenSslComplementOfDefault() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all of the cipher suites which are added by OpenSSL when using the special
COMPLEMENTOFDEFAULTrule. - matchOpenSslDefaultDeletes() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all of the cipher suites which are automatically deleted by OpenSSL when using the special
DEFAULTrule. - matchProtocol(EnumSet<Protocol>) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given protocols.
- matchProtocol(Protocol) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches the given protocol.
- matchProtocol(Protocol...) - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Return a predicate which matches any of the given protocols.
- matchTrue() - Static method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Match all possible cipher suites.
- MD5 - org.wildfly.security.ssl.Digest
-
The MD5 digest algorithm.
- MEDIUM - org.wildfly.security.ssl.SecurityLevel
N
- name - Variable in enum org.wildfly.security.ssl.Protocol
- NONE - org.wildfly.security.ssl.SecurityLevel
- NULL - org.wildfly.security.ssl.Authentication
-
No authentication (the cipher suite is anonymous).
- NULL - org.wildfly.security.ssl.Encryption
-
No encryption.
- NULL_SELECTOR - Static variable in interface org.wildfly.security.ssl.SSLContextSelector
-
A selector which always returns
null(no match).
O
- OPENSSL_DEFAULT_CIPHER_SUITE_NAMES - Static variable in class org.wildfly.security.ssl.CipherSuiteSelector
-
OpenSSL default cipher suites for TLSv1.3.
- openSslAll() - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Get the cipher selector which OpenSSL defines as
ALL. - openSslCombinedDefault() - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Get the cipher selector which OpenSSL defines as
DEFAULTcombined with the cipher suites which OpenSSL defines as the default cipher suites for TLSv1.3. - openSslDefault() - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Get the cipher selector which OpenSSL defines as
DEFAULT. - openSslDefaultCipherSuites() - Static method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Get the cipher selector which OpenSSL defines as the default cipher suites for TLSv1.3.
- org.wildfly.security.ssl - package org.wildfly.security.ssl
- org.wildfly.security.ssl._private - package org.wildfly.security.ssl._private
P
- Protocol - Enum in org.wildfly.security.ssl
-
The protocol type for SSL/TLS cipher suite selection and protocol selection.
- ProtocolSelector - Class in org.wildfly.security.ssl
-
An immutable filter for SSL/TLS protocols.
- PSK - org.wildfly.security.ssl.Authentication
-
Pre-shared key (PSK) based authentication.
- PSK - org.wildfly.security.ssl.KeyAgreement
-
Pre-shared key ("PSK") key agreement.
- pushToEnd(String) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
A convenience method to push a cipher suite by name to the end of the enabled ciphers list.
- pushToEnd(CipherSuitePredicate) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Push all cipher suites which are matched by the given predicate to the end of the enabled ciphers list.
- putSessionValueIfAbsent(SSLSession, String, Object) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Put a value on the session if the value is not yet set.
R
- RC2 - org.wildfly.security.ssl.Encryption
-
RC2 encryption.
- RC4 - org.wildfly.security.ssl.Encryption
-
RC4 encryption.
- remove(String) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
A convenience method to remove a cipher suite by name.
- remove(String) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Remove the given protocol.
- remove(EnumSet<Protocol>) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Remove the given protocols.
- remove(CipherSuitePredicate) - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Remove all cipher suites which are matched by the given predicate.
- remove(Protocol) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Remove the given protocol.
- remove(Protocol...) - Method in class org.wildfly.security.ssl.ProtocolSelector
-
Remove the given protocols.
- removeSessionValue(SSLSession, String) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Remove and return a value on the session.
- removeSessionValue(SSLSession, String, Object) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Remove the given key-value pair on the session.
- replaceSessionValue(SSLSession, String, Object) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Replace the given key's value with a new value.
- replaceSessionValue(SSLSession, String, Object, Object) - Static method in class org.wildfly.security.ssl.SSLUtils
-
Replace the given key's value with a new value if (and only if) it is mapped to the given existing value.
- RSA - org.wildfly.security.ssl.Authentication
-
RSA key-based authentication.
- RSA - org.wildfly.security.ssl.KeyAgreement
-
RSA key agreement.
- RSAPSK - org.wildfly.security.ssl.KeyAgreement
-
RSA pre-shared key ("PSK") key agreement.
S
- SecurityLevel - Enum in org.wildfly.security.ssl
-
The security level setting for SSL/TLS cipher suite selection.
- SEED - org.wildfly.security.ssl.Encryption
-
SEED encryption.
- selectContext(SSLConnectionInformation) - Method in interface org.wildfly.security.ssl.SSLContextSelector
-
Select the SSL context which corresponds to the given connection information.
- SelectingContext - Interface in org.wildfly.security.ssl._private
-
Implemented by
SSLEngineinstances that support selection of an alternative engine. - setAcceptedIssuers(X509Certificate[]) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Deprecated.accepted issuers are automatically set when creating the trust manager
- setAuthenticationOptional(boolean) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Where a SecurityDomain is associated with this Builder if the client presents a certificate an attempt will be made to obtain a SecurityIdentity by using the certificate for authentication, setting this flag to
trueallows for a failed authentication to be silently ignored. - setCipherSuiteSelector(CipherSuiteSelector) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the cipher suite selector to use for this context.
- setClientMode(boolean) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the client mode of the target SSL context.
- setCrlStream(InputStream) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set the input stream pointing to a certificate revocation list (may be
null). - setCrlStreams(List<InputStream>) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set the input streams pointing to certificate revocation lists (may be an empty list).
- setDefaultContext(SSLContext) - Method in class org.wildfly.security.ssl.SNIContextMatcher.Builder
- setEnabledCipherSuites(SSLContext, SSLEngine, String[]) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnabledCipherSuites(SSLContext, SSLServerSocket, String[]) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnabledCipherSuites(SSLContext, SSLSocket, String[]) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnabledProtocols(SSLContext, SSLEngine, String[]) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnabledProtocols(SSLContext, SSLServerSocket, String[]) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnabledProtocols(SSLContext, SSLSocket, String[]) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnableSessionCreation(SSLContext, SSLEngine, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnableSessionCreation(SSLContext, SSLServerSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setEnableSessionCreation(SSLContext, SSLSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setKeyManager(X509ExtendedKeyManager) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the key manager which should be used to hold identities for this context.
- setKeyManagerSecurityFactory(SecurityFactory<X509ExtendedKeyManager>) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the factory for the key manager which should be used to hold identities for this context.
- setMaxCertPath(int) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set the maximum number of non-self-issued intermediate certificates that may exist in a certification path.
- setMechanismConfigurationSelector(MechanismConfigurationSelector) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set selector of mechanism configuration for
ServerAuthenticationContext, which will be used for SSL client authentication. - setNeedClientAuth(boolean) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Force the SSLContext created by this builder to need client authentication.
- setNeedClientAuth(SSLContext, SSLEngine, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setNeedClientAuth(SSLContext, SSLServerSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setNeedClientAuth(SSLContext, SSLSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setNoFallback(boolean) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set if only one method of obtaining revocation status should be used.
- setOcspResponderCert(X509Certificate) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set OCSP responder's certificate.
- setOnlyEndEntity(boolean) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set if only leaf certificate revocation should be checked.
- setPreferCrls(boolean) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set if CRL revocation should be executed before OCSP.
- setProtocolSelector(ProtocolSelector) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the protocol selector to use for this context.
- setProviderName(String) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the provider name.
- setProviderSupplier(Supplier<Provider[]>) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the provider supplier.
- setResponderURI(URI) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set an OCSP Responder
URIto override those extracted from certificates. - setSecurityDomain(SecurityDomain) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the security domain to use to authenticate clients.
- setSelectionCallback(Function<SSLEngine, SSLEngine>) - Method in interface org.wildfly.security.ssl._private.SelectingContext
- setSessionCacheSize(int) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Sets the size of the cache used for storing SSLSession objects.
- setSessionTimeout(int) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Sets the timeout limit for SSLSession objects.
- setSoftFail(boolean) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set if certificate should be allowed in case the revocation status cannot be obtained.
- setSSLParameters(SSLContext, SSLEngine, SSLParameters) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setSSLParameters(SSLContext, SSLServerSocket, SSLParameters) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setSSLParameters(SSLContext, SSLSocket, SSLParameters) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setTrustManager(X509TrustManager) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the trust manager which should be used to hold identities for this context.
- setTrustManagerFactory(TrustManagerFactory) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set a
TrustManagerFactory - setTrustManagerSecurityFactory(SecurityFactory<X509TrustManager>) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set the factory for the trust manager which should be used for the initial trust decisions during connection.
- setTrustStore(KeyStore) - Method in class org.wildfly.security.ssl.X509RevocationTrustManager.Builder
-
Set a
KeyStorewith the trusted certificates (must not benull) - setUseCipherSuitesOrder(boolean) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Sets whether the local cipher suites preference should be honored.
- setUseClientMode(SSLContext, SSLEngine, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setUseClientMode(SSLContext, SSLServerSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setUseClientMode(SSLContext, SSLSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setWantClientAuth(boolean) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Force the SSLContext created by this builder to want client authentication.
- setWantClientAuth(SSLContext, SSLEngine, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setWantClientAuth(SSLContext, SSLServerSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setWantClientAuth(SSLContext, SSLSocket, boolean) - Method in interface org.wildfly.security.ssl.SSLConfigurator
- setWrap(boolean) - Method in class org.wildfly.security.ssl.SSLContextBuilder
-
Set if the configured SSL engine and sockets created using the SSL context should be wrapped to prevent modification to the configuration.
- SHA1 - org.wildfly.security.ssl.Digest
-
The SHA-1 digest algorithm.
- SHA256 - org.wildfly.security.ssl.Digest
-
The SHA-256 digest algorithm.
- SHA384 - org.wildfly.security.ssl.Digest
-
The SHA-384 digest algorithm.
- SNIContextMatcher - Class in org.wildfly.security.ssl
-
A class which returns a matching SSL context based on the SNI server list provided.
- SNIContextMatcher.Builder - Class in org.wildfly.security.ssl
-
A class which allows building and configuration SNIContextMatcher.
- sniMatcherSelector(SNIMatcher, SSLContext) - Static method in interface org.wildfly.security.ssl.SSLContextSelector
-
Create a selector which returns the given SSL context if the given SNI matcher matches.
- SNISSLContext - Class in org.wildfly.security.ssl
-
A class that uses the provided SNIContextMatcher to determine the SSLContext to be used for the connection.
- SNISSLContext(SNIContextMatcher) - Constructor for class org.wildfly.security.ssl.SNISSLContext
- sortByAlgorithmKeyLength() - Method in class org.wildfly.security.ssl.CipherSuiteSelector
-
Sort all of the enabled ciphers by decreasing key length.
- SRP - org.wildfly.security.ssl.KeyAgreement
-
Secure remote password ("SRP") key agreement as per RFC 5054.
- SSL_SESSION_IDENTITY_KEY - Static variable in class org.wildfly.security.ssl.SSLUtils
-
The key used to store the authenticated
SecurityIdentityonto theSSLSession. - SSLConfigurator - Interface in org.wildfly.security.ssl
-
A configurator for SSL contexts and their produced objects.
- SSLConnectionInformation - Interface in org.wildfly.security.ssl
-
Information about the SSL connection currently being built.
- SSLContextBuilder - Class in org.wildfly.security.ssl
-
A class which allows building and configuration of a single client- or server-side SSL context.
- SSLContextBuilder() - Constructor for class org.wildfly.security.ssl.SSLContextBuilder
- SSLContextSelector - Interface in org.wildfly.security.ssl
-
A selector which chooses an SSL context based on connection information.
- SSLUtils - Class in org.wildfly.security.ssl
-
SSL factories and utilities.
- SSLv2 - org.wildfly.security.ssl.Protocol
-
The SSL version 2 protocol.
- SSLv2Hello - org.wildfly.security.ssl.Protocol
-
The SSL version 2 hello protocol
- SSLv3 - org.wildfly.security.ssl.Protocol
-
The SSL version 3 protocol.
T
- TLSv1 - org.wildfly.security.ssl.Protocol
-
The TLS version 1.0 protocol.
- TLSv1_1 - org.wildfly.security.ssl.Protocol
-
The TLS version 1.1 protocol.
- TLSv1_2 - org.wildfly.security.ssl.Protocol
-
The TLS version 1.2 protocol.
- TLSv1_3 - org.wildfly.security.ssl.Protocol
-
The TLS version 1.3 protocol.
- toString() - Method in class org.wildfly.security.ssl.CipherSuitePredicate
-
Get the string representation of this predicate.
- toString() - Method in class org.wildfly.security.ssl.CipherSuiteSelector
- toString() - Method in class org.wildfly.security.ssl.ProtocolSelector
V
- valueOf(String) - Static method in enum org.wildfly.security.ssl.Authentication
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.wildfly.security.ssl.Digest
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.wildfly.security.ssl.Encryption
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.wildfly.security.ssl.KeyAgreement
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.wildfly.security.ssl.Protocol
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.wildfly.security.ssl.SecurityLevel
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum org.wildfly.security.ssl.Authentication
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.wildfly.security.ssl.Digest
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.wildfly.security.ssl.Encryption
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.wildfly.security.ssl.KeyAgreement
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.wildfly.security.ssl.Protocol
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.wildfly.security.ssl.SecurityLevel
-
Returns an array containing the constants of this enum type, in the order they are declared.
X
- X509CRLExtendedTrustManager - Class in org.wildfly.security.ssl
-
Deprecated.
- X509CRLExtendedTrustManager(KeyStore) - Constructor for class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.Creates a new instance using with a default trust manager factory.
- X509CRLExtendedTrustManager(KeyStore, InputStream) - Constructor for class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.Creates a new instance using with a default trust manager factory.
- X509CRLExtendedTrustManager(KeyStore, TrustManagerFactory, InputStream, int, X509Certificate[]) - Constructor for class org.wildfly.security.ssl.X509CRLExtendedTrustManager
-
Deprecated.Creates a new instance.
- X509RevocationTrustManager - Class in org.wildfly.security.ssl
-
Extension to the
X509TrustManagerinterface to support OCSP and CRL verification. - X509RevocationTrustManager.Builder - Class in org.wildfly.security.ssl
_
- _3DES - org.wildfly.security.ssl.Encryption
-
Triple-DES encryption.
All Classes All Packages