Class ServerSslConfig


  • public class ServerSslConfig
    extends Object
    Shared configuration for setting up server-side SSL.
    • Field Detail

      • certificate

        public CertificateConfig certificate
        The server certificate configuration.
      • cipherSuites

        @ConfigItem
        public Optional<List<String>> cipherSuites
        The cipher suites to use. If none is given, a reasonable default is selected.
      • protocols

        @DefaultConverter
        @ConfigItem(defaultValue="TLSv1.3,TLSv1.2")
        public Set<String> protocols
        Sets the ordered list of enabled SSL/TLS protocols.

        If not set, it defaults to "TLSv1.3, TLSv1.2". The following list of protocols are supported: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3. To only enable TLSv1.3, set the value to to "TLSv1.3".

        Note that setting an empty list, and enabling SSL/TLS is invalid. You must at least have one protocol.

      • sni

        @ConfigItem(defaultValue="false")
        public boolean sni
        Enables Server Name Indication (SNI), an TLS extension allowing the server to use multiple certificates. The client indicate the server name during the TLS handshake, allowing the server to select the right certificate.
    • Constructor Detail

      • ServerSslConfig

        public ServerSslConfig()