bayou.ssl

Class SslChannel2Connection

java.lang.Object

bayou.ssl.SslChannel2Connection

public class SslChannel2Connection
extends Object

Convert a TcpChannel to SslConnection.

Data through the TcpChannel are encrypted SSL records, while data through SslConnection interface are decrypted/plain text.

Constructor Summary

Constructors

Constructor and Description
SslChannel2Connection(boolean clientMode, SSLContext sslContext, ConsumerX<SSLEngine> sslEngineConf) Create a TcpChannel to SslConnection converter

Method Summary

Instance Methods
Async<SslConnection>	convert(TcpChannel channel) Convert a TcpChannel to an SslConnection.
Async<TcpConnection>	convert(TcpChannel channel, TcpChannel2Connection plainConverter) Convert a server-side TcpChannel to SslConnection or plain TcpConnection.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SslChannel2Connection

public SslChannel2Connection(boolean clientMode,
                             SSLContext sslContext,
                             ConsumerX<SSLEngine> sslEngineConf)
                      throws Exception

Create a TcpChannel to SslConnection converter

Examples of `sslEngineConf`:

   sslEngineConf = engine->
   {
       engine.setWantClientAuth(true);  // server wants client certificates
   };
 

  sslEngineConf = engine->
  {
      SSLParameters sslParameters = engine.getSSLParameters();
      sslParameters.setEndpointIdentificationAlgorithm("HTTPS"); // client verifies server host name
      engine.setSSLParameters(sslParameters);
  };
 

Parameters:

clientMode - whether in client mode or server mode

sslContext - the SSLContext for connections; null means the default

sslEngineConf - Action to configure each SSLEngine

Throws:

Exception

Method Detail

convert

public Async<SslConnection> convert(TcpChannel channel)

Convert a TcpChannel to an SslConnection.

This async action completes when the SSL handshake succeeds or fails.

convert

public Async<TcpConnection> convert(TcpChannel channel,
                                    TcpChannel2Connection plainConverter)

Convert a server-side TcpChannel to SslConnection or plain TcpConnection.

This is for server side only, `clientMode` must be false.

Initial bytes from the client is used to detect the type of the connection. The app protocol must have the client write some data first; and the first byte of the app data must not be 22 (0x16). For example, HTTP protocol satisfies these requirements.