org.eclipse.jetty.server.ssl
Class SslCertificates

java.lang.Object
  org.eclipse.jetty.server.ssl.SslCertificates

public class SslCertificates
extends java.lang.Object

Constructor Summary

SslCertificates()

Method Summary

static void	customize(javax.net.ssl.SSLSession sslSession, EndPoint endpoint, Request request) Allow the Listener a chance to customise the request.
static java.security.cert.X509Certificate[]	getCertChain(javax.net.ssl.SSLSession sslSession)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SslCertificates

public SslCertificates()

Method Detail

getCertChain

public static java.security.cert.X509Certificate[] getCertChain(javax.net.ssl.SSLSession sslSession)

customize

public static void customize(javax.net.ssl.SSLSession sslSession,
                             EndPoint endpoint,
                             Request request)
                      throws java.io.IOException

Allow the Listener a chance to customise the request. before the server does its stuff.
This allows the required attributes to be set for SSL requests.
The requirements of the Servlet specs are:

• an attribute named "javax.servlet.request.ssl_session_id" of type String (since Servlet Spec 3.0).
• an attribute named "javax.servlet.request.cipher_suite" of type String.
• an attribute named "javax.servlet.request.key_size" of type Integer.
• an attribute named "javax.servlet.request.X509Certificate" of type java.security.cert.X509Certificate[]. This is an array of objects of type X509Certificate, the order of this array is defined as being in ascending order of trust. The first certificate in the chain is the one set by the client, the next is the one used to authenticate the first, and so on.

Parameters:

endpoint - The Socket the request arrived on. This should be a SocketEndPoint wrapping a SSLSocket.

request - HttpRequest to be customised.

Throws:

java.io.IOException