Class OpenSslServerContext

  • All Implemented Interfaces:
    io.netty.util.ReferenceCounted

    public final class OpenSslServerContext
    extends OpenSslContext
    A server-side SslContext which uses OpenSSL's SSL/TLS implementation.

    This class will use a finalizer to ensure native resources are automatically cleaned up. To avoid finalizers and manually release the native memory see ReferenceCountedOpenSslServerContext.

    • Constructor Detail

      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    Iterable<String> ciphers,
                                    ApplicationProtocolConfig apn,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        apn - Provides a means to configure parameters related to application protocol negotiation.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    Iterable<String> ciphers,
                                    Iterable<String> nextProtocols,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        nextProtocols - the application layer protocols to accept, in the order of preference. null to disable TLS NPN/ALPN extension.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    TrustManagerFactory trustManagerFactory,
                                    Iterable<String> ciphers,
                                    ApplicationProtocolConfig config,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        config - Application protocol config.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    TrustManagerFactory trustManagerFactory,
                                    Iterable<String> ciphers,
                                    OpenSslApplicationProtocolNegotiator apn,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        apn - Application protocol negotiator.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    Iterable<String> ciphers,
                                    CipherSuiteFilter cipherFilter,
                                    ApplicationProtocolConfig apn,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        cipherFilter - a filter to apply over the supplied list of ciphers
        apn - Provides a means to configure parameters related to application protocol negotiation.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File trustCertCollectionFile,
                                    TrustManagerFactory trustManagerFactory,
                                    File keyCertChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    KeyManagerFactory keyManagerFactory,
                                    Iterable<String> ciphers,
                                    CipherSuiteFilter cipherFilter,
                                    ApplicationProtocolConfig config,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        trustCertCollectionFile - an X.509 certificate collection file in PEM format. This provides the certificate collection used for mutual authentication. null to use the system default
        trustManagerFactory - the TrustManagerFactory that provides the TrustManagers that verifies the certificates sent from clients. null to use the default or the results of parsing trustCertCollectionFile.
        keyCertChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        keyManagerFactory - the KeyManagerFactory that provides the KeyManagers that is used to encrypt data being sent to clients. null to use the default or the results of parsing keyCertChainFile and keyFile.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        cipherFilter - a filter to apply over the supplied list of ciphers Only required if provider is SslProvider.JDK
        config - Provides a means to configure parameters related to application protocol negotiation.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    TrustManagerFactory trustManagerFactory,
                                    Iterable<String> ciphers,
                                    CipherSuiteFilter cipherFilter,
                                    ApplicationProtocolConfig config,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        cipherFilter - a filter to apply over the supplied list of ciphers
        config - Application protocol config.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File certChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    TrustManagerFactory trustManagerFactory,
                                    Iterable<String> ciphers,
                                    CipherSuiteFilter cipherFilter,
                                    OpenSslApplicationProtocolNegotiator apn,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        certChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        cipherFilter - a filter to apply over the supplied list of ciphers
        apn - Application protocol negotiator.
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException
      • OpenSslServerContext

        @Deprecated
        public OpenSslServerContext​(File trustCertCollectionFile,
                                    TrustManagerFactory trustManagerFactory,
                                    File keyCertChainFile,
                                    File keyFile,
                                    String keyPassword,
                                    KeyManagerFactory keyManagerFactory,
                                    Iterable<String> ciphers,
                                    CipherSuiteFilter cipherFilter,
                                    OpenSslApplicationProtocolNegotiator apn,
                                    long sessionCacheSize,
                                    long sessionTimeout)
                             throws SSLException
        Deprecated.
        Creates a new instance.
        Parameters:
        trustCertCollectionFile - an X.509 certificate collection file in PEM format. This provides the certificate collection used for mutual authentication. null to use the system default
        trustManagerFactory - the TrustManagerFactory that provides the TrustManagers that verifies the certificates sent from clients. null to use the default or the results of parsing trustCertCollectionFile.
        keyCertChainFile - an X.509 certificate chain file in PEM format
        keyFile - a PKCS#8 private key file in PEM format
        keyPassword - the password of the keyFile. null if it's not password-protected.
        keyManagerFactory - the KeyManagerFactory that provides the KeyManagers that is used to encrypt data being sent to clients. null to use the default or the results of parsing keyCertChainFile and keyFile.
        ciphers - the cipher suites to enable, in the order of preference. null to use the default cipher suites.
        cipherFilter - a filter to apply over the supplied list of ciphers Only required if provider is SslProvider.JDK
        apn - Application Protocol Negotiator object
        sessionCacheSize - the size of the cache used for storing SSL session objects. 0 to use the default value.
        sessionTimeout - the timeout for the cached SSL session objects, in seconds. 0 to use the default value.
        Throws:
        SSLException