Package io.kroxylicious.proxy.config.tls

@ReturnValuesAreNonnullByDefault @DefaultAnnotationForParameters(edu.umd.cs.findbugs.annotations.NonNull.class) @DefaultAnnotation(edu.umd.cs.findbugs.annotations.NonNull.class) package io.kroxylicious.proxy.config.tls

TLS configuration for proxy connections to clients and upstream clusters.

These configuration classes define keystores, trust stores, and TLS options for both server-side (client connections) and client-side (upstream cluster connections) TLS.

Class	Description
AllowDeny<T>	Class to keep track of allow and deny lists meant for use when building context for SSLEngine.
InsecureTls	A TrustProvider that allows the disabling trust verification.
KeyPair	A KeyProvider backed by a private-key/certificate pair expressed in PEM format.
KeyProvider	A KeyProvider is a source of a TLS private-key/certificate pair and optionally intermediate certificate(s).
KeyProviderVisitor<T>	Visitor for implementations of KeyProvider
KeyStore	A KeyProvider backed by a Java Truststore.
PlatformTrustProvider
ServerOptions	Options that control TLS negotiation when in server mode.
Tls	Provides TLS configuration for this peer.
TlsClientAuth
TlsCredentialSupplierConfig	Configuration for a TLS credential supplier that dynamically provides TLS credentials.
TrustOptions
TrustProvider	A TrustProvider is a source of trust anchors used to determine whether a certificate present by a peer is trusted.
TrustProviderVisitor<T>	Visitor for implementations of TrustProvider
TrustStore	A TrustProvider backed by a Java Truststore.