Package org.forgerock.openig.tools

Class ClientTlsOptions

java.lang.Object

org.forgerock.openig.tools.TlsOptions

org.forgerock.openig.tools.ClientTlsOptions

public class ClientTlsOptions
extends TlsOptions

Extension to TlsOptions to support changing the behaviour of how hostname verification is enforced.

Constructor Summary

Constructors

Constructor	Description
ClientTlsOptions(String algorithm, KeyManager[] managers, TrustManager[] trustManagers, List<String> ciphers, List<String> protocols, boolean enableAlpn, HttpClientHandler.HostnameVerifier hostnameVerifier)	Constructs TLS options with provided values.

Method Summary

Modifier and Type	Method	Description
HttpClientHandler.HostnameVerifier	getHostnameVerifier()	Returns the HttpClientHandler.HostnameVerifier to apply.

Methods inherited from class org.forgerock.openig.tools.TlsOptions

getAlgorithm, getCipherSuitesArray, getCipherSuitesList, getEnabledProtocolsArray, getEnabledProtocolsList, getKeyManagers, getTrustManagers, isAlpnEnabled

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ClientTlsOptions

public ClientTlsOptions(String algorithm,
 KeyManager[] managers,
 TrustManager[] trustManagers,
 List<String> ciphers,
 List<String> protocols,
 boolean enableAlpn,
 HttpClientHandler.HostnameVerifier hostnameVerifier)

Constructs TLS options with provided values.

Parameters:

algorithm - SSL algorithm (not null)

managers - array of KeyManager (may be null)

trustManagers - array of TrustManager (may be null)

ciphers - list of cipher suites to be enabled (may be empty for JVM default)

protocols - list of protocols to be enabled (may be empty for JVM default)

enableAlpn - enable the ALPN TLS extension

hostnameVerifier - the HttpClientHandler.HostnameVerifier to apply

Method Details

getHostnameVerifier

public HttpClientHandler.HostnameVerifier getHostnameVerifier()

Returns the HttpClientHandler.HostnameVerifier to apply.

Returns:

the HttpClientHandler.HostnameVerifier to apply.