com.concordium.sdk

Class TLSConfig

java.lang.Object

com.concordium.sdk.TLSConfig

public class TLSConfig
extends Object

Configuration to be used for a TLS enforced Connection

Method Summary

Modifier and Type	Method and Description
void	assertOk()
static TLSConfig	auto() The underlying connection is forced to use TLS.
static TLSConfig	from(File serverCert) Constructor for establishing a basic TLS connection.
File	getClientCert() If mTLS is to be used then this should be set to the certificate of the client.
File	getClientKeyFile() If mTLS is to be used then this should be set to the private key of the client.
File	getServerCert() The servers certificate or some CA that authorized it.
static TLSConfig	mTLS(File serverCert, File clientCert, File clientKeyFile) Constructor for establishing a mTLS connection.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

from

public static TLSConfig from(File serverCert)

Constructor for establishing a basic TLS connection.

Parameters:

serverCert - The X509 certificate of the server.

Returns:

the TLSConfig

mTLS

public static TLSConfig mTLS(File serverCert,
                             File clientCert,
                             File clientKeyFile)

Constructor for establishing a mTLS connection.

Parameters:

serverCert - The pem encoded certificate of the server. Supply 'null' here if the default JVM trust store should be used for the connection.

clientCert - The pem encoded certificate of the client

clientKeyFile - The PEM encoded PKCS#8 private key for the client.

Returns:

the TLSConfig

auto

public static TLSConfig auto()

The underlying connection is forced to use TLS. Note. the servers certificate must be trusted by the default jks CA.

See from(File) or mTLS(File, File, File) for configuring custom trust or mTLS.

Returns:

the TLSConfig

assertOk

public void assertOk()

getServerCert

public File getServerCert()

The servers certificate or some CA that authorized it. See TlsChannelCredentials.Builder#trustManager(File) for details of the expected file format.

getClientCert

public File getClientCert()

If mTLS is to be used then this should be set to the certificate of the client. See TlsChannelCredentials.Builder#keyManager(File, File) for details of the expected file format.

getClientKeyFile

public File getClientKeyFile()

If mTLS is to be used then this should be set to the private key of the client. See TlsChannelCredentials.Builder#keyManager(File, File) for details of the expected file format.