string[]

Enabled cipher suites for TLS communication.

TlsClientAuth (REQUIRED, OPTIONAL, NONE)

Configure requirement for mutual TLS.

Allowed values:

• REQUIRED: Mutual TLS is required. Server MUST present a certificate trusted by the client, client MUST present a certificate trusted by the server. This implies private key and trust configuration for both server and client.

• OPTIONAL: Mutual TLS is optional. Server MUST present a certificate trusted by the client, client MAY present a certificate trusted by the server. This implies private key configuration at least for server, trust configuration for at least client.

• NONE: Mutual TLS is disabled. Server MUST present a certificate trusted by the client, client does not present a certificate. This implies private key configuration for server, trust configuration for client.

boolean

Flag indicating whether Tls is enabled.

string

Identification algorithm for SSL endpoints.

string

Provider of the key stores used internally to create a key and trust manager factories.

string

Type of the key stores used internally to create a key and trust manager factories.

string

Algorithm of the key manager factory used when private key is defined. Defaults to javax.net.ssl.KeyManagerFactory.getDefaultAlgorithm().

io.helidon.common.tls.TlsManager (service provider interface)

The Tls manager. If one is not explicitly defined in the config then a default manager will be created.

See ConfiguredTlsManager

PrivateKey

Private key to use. For server side TLS, this is required. For client side TLS, this is optional (used when mutual TLS is enabled).

string

Configure the protocol used to obtain an instance of javax.net.ssl.SSLContext.

string[]

Enabled protocols for TLS communication. Example of valid values for TLS protocol: TLSv1.3, TLSv1.2

string

Use explicit provider to obtain an instance of javax.net.ssl.SSLContext.

RevocationConfig

Certificate revocation check configuration.

string

Algorithm to use when creating a new secure random.

string

Provider to use when creating a new secure random. When defined, secureRandomAlgorithm() must be defined as well.

int

SSL session cache size.

Duration

SSL session timeout.

X509Certificate[]

List of certificates that form the trust manager.

boolean

Trust any certificate provided by the other side of communication.

This is a dangerous setting: if set to true, any certificate will be accepted, throwing away most of the security advantages of TLS. NEVER do this in production.

string

Trust manager factory algorithm.