Class AprSSLSupport
java.lang.Object
org.apache.tomcat.util.net.AprSSLSupport
- All Implemented Interfaces:
SSLSupport
Deprecated.
The APR/Native Connector will be removed in Tomcat 9.1.x onwards and has been removed from Tomcat 10.1.x
onwards.
Implementation of SSLSupport for APR.
TODO: Add a mechanism (or figure out how to use what we already have) to invalidate the session.
-
Field Summary
Fields inherited from interface SSLSupport
CERTIFICATE_KEY, CIPHER_SUITE_KEY, KEY_SIZE_KEY, PROTOCOL_VERSION_KEY, REQUESTED_CIPHERS_KEY, REQUESTED_PROTOCOL_VERSIONS_KEY, SESSION_ID_KEY, SESSION_MGR -
Constructor Summary
ConstructorsConstructorDescriptionAprSSLSupport(AprEndpoint.AprSocketWrapper socketWrapper, String clientCertProvider) Deprecated. -
Method Summary
Modifier and TypeMethodDescriptionDeprecated.The cipher suite being used on this connection.Deprecated.Get the key size.Deprecated.The client certificate chain (if any).Deprecated.Returns the protocol string indicating how the SSL socket was created e.g.Deprecated.Returns the list of SSL/TLS ciphers requested by the client.Deprecated.Returns the list of SSL/TLS protocol versions requested by the client.Deprecated.The current session Id.Methods inherited from class Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface SSLSupport
getLocalCertificateChain
-
Constructor Details
-
AprSSLSupport
Deprecated.
-
-
Method Details
-
getCipherSuite
Deprecated.Description copied from interface:SSLSupportThe cipher suite being used on this connection.- Specified by:
getCipherSuitein interfaceSSLSupport- Returns:
- The name of the cipher suite as returned by the SSL/TLS implementation
- Throws:
IOException- If an error occurs trying to obtain the cipher suite
-
getPeerCertificateChain
Deprecated.Description copied from interface:SSLSupportThe client certificate chain (if any).- Specified by:
getPeerCertificateChainin interfaceSSLSupport- Returns:
- The certificate chain presented by the client with the peer's certificate first, followed by those of any certificate authorities
- Throws:
IOException- If an error occurs trying to obtain the certificate chain
-
getKeySize
Deprecated.Description copied from interface:SSLSupportGet the key size. What we're supposed to put here is ill-defined by the Servlet spec (S 4.7 again). There are at least 4 potential values that might go here: (a) The size of the encryption key (b) The size of the MAC key (c) The size of the key-exchange key (d) The size of the signature key used by the server Unfortunately, all of these values are nonsensical.- Specified by:
getKeySizein interfaceSSLSupport- Returns:
- The effective key size for the current cipher suite
- Throws:
IOException- If an error occurs trying to obtain the key size
-
getSessionId
Deprecated.Description copied from interface:SSLSupportThe current session Id.- Specified by:
getSessionIdin interfaceSSLSupport- Returns:
- The current SSL/TLS session ID
- Throws:
IOException- If an error occurs trying to obtain the session ID
-
getProtocol
Deprecated.Description copied from interface:SSLSupportReturns the protocol string indicating how the SSL socket was created e.g. TLSv1 or TLSv1.2 etc.- Specified by:
getProtocolin interfaceSSLSupport- Returns:
- the protocol string
- Throws:
IOException- If an error occurs trying to obtain the protocol information from the socket
-
getRequestedProtocols
Deprecated.Description copied from interface:SSLSupportReturns the list of SSL/TLS protocol versions requested by the client.- Specified by:
getRequestedProtocolsin interfaceSSLSupport- Returns:
- the list of requested protocols
- Throws:
IOException- If an error occurs trying to obtain the client requested protocol information from the socket
-
getRequestedCiphers
Deprecated.Description copied from interface:SSLSupportReturns the list of SSL/TLS ciphers requested by the client.- Specified by:
getRequestedCiphersin interfaceSSLSupport- Returns:
- the list of requested ciphers
- Throws:
IOException- If an error occurs trying to obtain the client request cipher information from the socket
-