org.eclipse.jetty.util.ssl

Interface SniX509ExtendedKeyManager.SniSelector

All Known Implementing Classes:

SslContextFactory.Server

Enclosing class:

SniX509ExtendedKeyManager

Functional Interface:

This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface
public static interface SniX509ExtendedKeyManager.SniSelector

Selects a certificate based on SNI information.

Field Summary

Fields

Modifier and Type	Field and Description
static String	DELEGATE

Method Summary

Modifier and Type	Method and Description
String	sniSelect(String keyType, Principal[] issuers, SSLSession session, String sniHost, Collection<X509> certificates) Selects a certificate based on SNI information.

Field Detail

DELEGATE

static final String DELEGATE

See Also:

Constant Field Values

Method Detail

sniSelect

String sniSelect(String keyType,
                 Principal[] issuers,
                 SSLSession session,
                 String sniHost,
                 Collection<X509> certificates)
          throws SSLHandshakeException

Selects a certificate based on SNI information.

This method may be invoked multiple times during the TLS handshake, with different parameters. For example, the keyType could be different, and subsequently the collection of certificates (because they need to match the keyType.

Parameters:

keyType - the key algorithm type name

issuers - the list of acceptable CA issuer subject names or null if it does not matter which issuers are used

session - the TLS handshake session or null if not known.

sniHost - the server name indication sent by the client, or null if the client did not send the server name indication

certificates - the list of certificates matching keyType and issuers known to this SslContextFactory

Returns:

the alias of the certificate to return to the client, from the certificates list, or DELEGATE if the certificate choice should be delegated to the nested key manager or null for no match.

Throws:

SSLHandshakeException - if the TLS handshake should be aborted