string[]

Enabled cipher suites for TLS communication.

@return cipher suits to enable, by default (or if list is empty), all available cipher suites
        are enabled

TlsClientAuth (REQUIRED, OPTIONAL, NONE)

Configure requirement for mutual TLS.

@return what type of mutual TLS to use, defaults to TlsClientAuth#NONE

boolean

Flag indicating whether Tls is enabled.

@return enabled flag

string

Identification algorithm for SSL endpoints.

@return configure endpoint identification algorithm, or set to `NONE`
        to disable endpoint identification (equivalent to hostname verification).
        Defaults to `Tls#ENDPOINT_IDENTIFICATION_HTTPS`

string

Provider of the key stores used internally to create a key and trust manager factories.

@return keystore provider, if not defined, provider is not specified

string

Type of the key stores used internally to create a key and trust manager factories.

@return keystore type, defaults to java.security.KeyStore#getDefaultType()

string

Algorithm of the key manager factory used when private key is defined. Defaults to javax.net.ssl.KeyManagerFactory#getDefaultAlgorithm().

@return algorithm to use

io.helidon.common.tls.TlsManager (service provider interface)

The Tls manager. If one is not explicitly defined in the config then a default manager will be created.

@return the tls manager of the tls instance
@see ConfiguredTlsManager

PrivateKey

Private key to use. For server side TLS, this is required. For client side TLS, this is optional (used when mutual TLS is enabled).

@return private key to use

string

Configure the protocol used to obtain an instance of javax.net.ssl.SSLContext.

@return protocol to use, defaults to `DEFAULT_PROTOCOL`

string[]

Enabled protocols for TLS communication. Example of valid values for TLS protocol: TLSv1.3, TLSv1.2

@return protocols to enable, by default (or if list is empty), all available protocols are enabled

string

Use explicit provider to obtain an instance of javax.net.ssl.SSLContext.

@return provider to use, defaults to none (only #protocol() is used by default)

RevocationConfig

Certificate revocation check configuration.

@return certificate revocation configuration

string

Algorithm to use when creating a new secure random.

@return algorithm to use, by default uses java.security.SecureRandom constructor

string

Provider to use when creating a new secure random. When defined, #secureRandomAlgorithm() must be defined as well.

@return provider to use, by default no provider is specified

int

SSL session cache size.

@return session cache size, defaults to 1024

Duration

SSL session timeout.

@return session timeout, defaults to 30 minutes

X509Certificate[]

List of certificates that form the trust manager.

@return certificates to be trusted

boolean

Trust any certificate provided by the other side of communication.

<b>This is a dangerous setting: </b> if set to `true`, any certificate will be accepted, throwing away
most of the security advantages of TLS. <b>NEVER</b> do this in production.

@return whether to trust all certificates, do not use in production

string

Trust manager factory algorithm.

@return algorithm to use