Interface SniConfig
- All Superinterfaces:
Prototype.Api
- All Known Implementing Classes:
SniConfig.BuilderBase.SniConfigImpl
Listener-scoped server TLS SNI policy configuration.
These options define how listener TLS virtual-host selection handles missing or unmatched ClientHello SNI hosts, and how the HTTP request authority is checked after TLS selects certificate material.
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeInterfaceDescriptionstatic classFluent API builder forSniConfig.static classSniConfig.BuilderBase<BUILDER extends SniConfig.BuilderBase<BUILDER, PROTOTYPE>, PROTOTYPE extends SniConfig>Fluent API builder base forSniConfig. -
Method Summary
Modifier and TypeMethodDescriptionPolicy for HTTP requests whose authority differs from the client-presented SNI host.static SniConfig.Builderbuilder()Create a new fluent API builder to customize configuration.static SniConfig.BuilderCreate a new fluent API builder from an existing instance.static SniConfigcreate()Create a new instance with default values.static SniConfigCreate a new instance from configuration.Policy for HTTP requests that use default listener TLS but claim a configured virtual-host authority.missing()Policy for TLS connections without an SNI host;SniSelectionPolicy.REJECTrequires at least one listener virtual host.Policy for TLS connections with an SNI host that does not match any configured virtual host;SniSelectionPolicy.REJECTrequires at least one listener virtual host.
-
Method Details
-
builder
Create a new fluent API builder to customize configuration.- Returns:
- a new builder
-
builder
Create a new fluent API builder from an existing instance.- Parameters:
instance- an existing instance used as a base for the builder- Returns:
- a builder based on an instance
-
create
-
create
-
missing
SniSelectionPolicy missing()Policy for TLS connections without an SNI host;SniSelectionPolicy.REJECTrequires at least one listener virtual host.- Returns:
- missing SNI policy
-
unmatched
SniSelectionPolicy unmatched()Policy for TLS connections with an SNI host that does not match any configured virtual host;SniSelectionPolicy.REJECTrequires at least one listener virtual host.- Returns:
- unmatched SNI policy
-
authorityMismatch
SniAuthorityPolicy authorityMismatch()Policy for HTTP requests whose authority differs from the client-presented SNI host.- Returns:
- authority mismatch policy
-
fallbackAuthority
SniAuthorityPolicy fallbackAuthority()Policy for HTTP requests that use default listener TLS but claim a configured virtual-host authority.- Returns:
- fallback authority policy
-