io.netty.example.securechat

Class SecureChatSslContextFactory

java.lang.Object

io.netty.example.securechat.SecureChatSslContextFactory

public final class SecureChatSslContextFactory
extends Object

Creates a bogus SSLContext. A client-side context created by this factory accepts any certificate even if it is invalid. A server-side context created by this factory sends a bogus certificate defined in SecureChatKeyStore.

You will have to create your context differently in a real world application.

Client Certificate Authentication

To enable client certificate authentication:

• Enable client authentication on the server side by calling SSLEngine.setNeedClientAuth(boolean) before creating SslHandler.
• When initializing an SSLContext on the client side, specify the KeyManager that contains the client certificate as the first argument of SSLContext.init(KeyManager[], TrustManager[], SecureRandom).
• When initializing an SSLContext on the server side, specify the proper TrustManager as the second argument of SSLContext.init(KeyManager[], TrustManager[], SecureRandom) to validate the client certificate.

Method Summary

Methods

Modifier and Type	Method and Description
static SSLContext	getClientContext()
static SSLContext	getServerContext()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getServerContext

public static SSLContext getServerContext()

getClientContext

public static SSLContext getClientContext()