Package io.kroxylicious.proxy.model

Class DenyCipherSuiteFilter

java.lang.Object

io.kroxylicious.proxy.model.DenyCipherSuiteFilter

All Implemented Interfaces:

io.netty.handler.ssl.CipherSuiteFilter

public final class DenyCipherSuiteFilter
extends Object
implements io.netty.handler.ssl.CipherSuiteFilter

This class has been built to filter cipher suites based on requirements for Kroxylicious If no ciphers are declared then the default platform ciphers will be used If ciphers are declared then they are used instead of the default platform ciphers Both lists would then have anything removed that wasn't supported or in the deniedCiphers

Constructor Summary

Constructors

Constructor	Description
DenyCipherSuiteFilter(Set<String> deniedCiphers)

Method Summary

Modifier and Type	Method	Description
String[]	filterCipherSuites(Iterable<String> ciphers, List<String> defaultCiphers, Set<String> supportedCiphers)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DenyCipherSuiteFilter

public DenyCipherSuiteFilter(@Nullable
 Set<String> deniedCiphers)

Method Details

filterCipherSuites

public String[] filterCipherSuites(Iterable<String> ciphers,
 List<String> defaultCiphers,
 Set<String> supportedCiphers)

Specified by:

filterCipherSuites in interface io.netty.handler.ssl.CipherSuiteFilter