Index

A B C D E F G H I K L N O P R S T V W X 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

alias() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns the value of the alias record component.
asTrustConfig() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
asTrustConfig() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
Create a SslTrustConfig based on the underlying file store that backs this key config
asTrustConfig() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 

B

buildDefaultTrustConfig(SslTrustConfig, SslKeyConfig) - Static method in class org.elasticsearch.common.ssl.SslConfigurationLoader
 
buildKeyConfig(Path) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
 
buildKeyStore(Collection<Certificate>, PrivateKey, char[]) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Construct an in-memory keystore with a single key entry.
buildTrustConfig(Path, SslVerificationMode, SslKeyConfig, Set<X509Field>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
 
buildTrustStore(Iterable<Certificate>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Construct an in-memory keystore with multiple trusted cert entries.
buildTrustStore(Iterable<Certificate>, String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
 

C

calculateFingerprint(X509Certificate, String) - Static method in class org.elasticsearch.common.ssl.SslUtil
 
certificate() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns the value of the certificate record component.
CERTIFICATE - Enum constant in enum class org.elasticsearch.common.ssl.SslVerificationMode
Verify the provided certificate against the trust chain, but do not verify the hostname.
CERTIFICATE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The path to a PEM formatted file that contains the certificate to be used as part of key management
CERTIFICATE_AUTHORITIES - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
A list of paths to PEM formatted certificates that should be trusted as CAs
checkClientTrusted(X509Certificate[], String) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
checkClientTrusted(X509Certificate[], String, Socket) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
checkIssuerTrust(Map<String, List<X509Certificate>>, X509Certificate) - Static method in class org.elasticsearch.common.ssl.SslDiagnostics
 
checkServerTrusted(X509Certificate[], String) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
checkServerTrusted(X509Certificate[], String, Socket) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
ciphers() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the ciphers record component.
CIPHERS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The SSL/TLS cipher suites that should be used
CLIENT - Enum constant in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
 
CLIENT_AUTH - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
When operating as a server, whether to request/require client certificates
clientAuth() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the clientAuth record component.
CompositeTrustConfig - Class in org.elasticsearch.common.ssl
A TrustConfiguration that merges trust anchors from a number of other trust configs to produce a single X509ExtendedTrustManager.
configure(SSLParameters) - Method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
Configure client authentication of the provided SSLParameters
createKeyManager() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
createKeyManager() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
createKeyManager() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
 
createKeyManager() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
createKeyManager(Certificate[], PrivateKey, char[]) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Returns a X509ExtendedKeyManager that is built from the provided private key and certificate chain
createKeyManager(KeyStore, char[], String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Creates a X509ExtendedKeyManager based on the key material in the provided KeyStore
createSslContext() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Dynamically create a new SSL context based on the current state of the configuration.
createTrustManager() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
createTrustManager() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
createTrustManager() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
 
createTrustManager() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
 
createTrustManager() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
 
createTrustManager() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
 
createTrustManager(KeyStore, String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Creates a X509ExtendedTrustManager based on the trust material in the provided KeyStore
createTrustManager(Collection<Certificate>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Creates a X509ExtendedTrustManager based on the provided certificates

D

DEFAULT_INSTANCE - Static variable in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
DefaultJdkTrustConfig - Class in org.elasticsearch.common.ssl
This class represents a trust configuration that corresponds to the default trusted CAs of the JDK
delete() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
Remove this entry from the underlying keystore
DerParser - Class in org.elasticsearch.common.ssl
A bare-minimum ASN.1 DER decoder, just having enough functions to decode PKCS#1 private keys in order to remain JCE/JVM agnostic.
DerParser(byte[]) - Constructor for class org.elasticsearch.common.ssl.DerParser
 
DerParser.Asn1Object - Class in org.elasticsearch.common.ssl
An ASN.1 TLV.
describeValidHostnames(X509Certificate) - Static method in class org.elasticsearch.common.ssl.SslDiagnostics
 
DiagnosticTrustManager - Class in org.elasticsearch.common.ssl
 
DiagnosticTrustManager(X509ExtendedTrustManager, Supplier<String>, DiagnosticTrustManager.DiagnosticLogger) - Constructor for class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
DiagnosticTrustManager.DiagnosticLogger - Interface in org.elasticsearch.common.ssl
This interface exists because the ssl-config library does not depend on log4j, however the whole purpose of this class is to log diagnostic messages, so it must be provided with a function by which it can do that.

E

EmptyKeyConfig - Class in org.elasticsearch.common.ssl
A SslKeyConfig that does nothing (provides a null key manager)
enabled() - Method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
 
equals(Object) - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
equals(Object) - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
equals(Object) - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
equals(Object) - Method in class org.elasticsearch.common.ssl.PemTrustConfig
 
equals(Object) - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
equals(Object) - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
 
explicitlyConfigured() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the explicitlyConfigured record component.

F

filter(KeyStore, Predicate<KeyStoreUtil.KeyStoreEntry>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Filters a keystore using a predicate.
format() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns the value of the format record component.
FULL - Enum constant in enum class org.elasticsearch.common.ssl.SslVerificationMode
Verify the provided certificate against the trust chain, and also verify that the hostname to which this client is connected matches one of the Subject-Alternative-Names in the certificate.

G

getAcceptedIssuers() - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
 
getAlias() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
 
getCipherSuites() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
 
getConfiguredCertificates() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
 
getConfiguredCertificates() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
 
getConfiguredCertificates() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
 
getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
 
getDependentFiles() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
 
getDependentFiles() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
 
getDependentFiles() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
 
getDependentFiles() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
 
getInteger() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
Get the value as integer
getKey(char[]) - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
If the current entry stores a private key, returns that key.
getKeys() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
getKeys() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
getKeys() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
 
getKeys() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
Equivalent to getKeys(false).
getKeys(boolean) - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
Return the list of keys inside the configured keystore, optionally applying the filter that was set during construction.
getLength() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
getListKeys() - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
The list of keys that are used to load a non-secure, list setting
getOid() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
getParser() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
For constructed field, return a parser for its content.
getSecureSetting(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Clients of this class should implement this method to load a fully-qualified key from the preferred secure settings source.
getSecureStringKeys() - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
The list of keys that are used to load a secure setting (such as a password) that would typically be stored in the elasticsearch keystore.
getSettingAsList(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Clients of this class should implement this method to load a fully-qualified key from the preferred settings source.
getSettingAsString(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Clients of this class should implement this method to load a fully-qualified key from the preferred settings source.
getString() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
getStringKeys() - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
The list of keys that are used to load a non-secure, non-list setting
getTrustDiagnosticFailure(X509Certificate[], SslDiagnostics.PeerType, SSLSession, String, Map<String, List<X509Certificate>>) - Method in class org.elasticsearch.common.ssl.SslDiagnostics
 
getType() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
getValue() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
getX509Certificate() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
If this entry is a private key entry (see KeyStoreUtil.KeyStoreEntry.isKeyEntry()), and the entry includes a certificate chain, and the leaf (first) element of that chain is an X.509 certificate, then that leaf certificate is returned.
getX509CertificateChain() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
If this entry is a private key entry (see KeyStoreUtil.KeyStoreEntry.isKeyEntry()), returns the certificate chain that is stored in the entry.
GLOBAL_DEFAULT_RESTRICTED_TRUST_FIELDS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationLoader
 

H

hashCode() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
hashCode() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
hashCode() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
hashCode() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
 
hashCode() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns a hash code value for this object.
hashCode() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns a hash code value for this object.
hashCode() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
hashCode() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
 
hasKeyMaterial() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
hasKeyMaterial() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
hasKeyMaterial() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
 
hasKeyMaterial() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
hasPrivateKey() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns the value of the hasPrivateKey record component.
hasSettings(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Clients of this class should implement this method to determine whether there are any settings for a given prefix.

I

inferKeyStoreType(String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Make a best guess about the "type" (see KeyStore.getType()) of the keystore file located at the given Path.
INSTANCE - Static variable in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
INSTANCE - Static variable in class org.elasticsearch.common.ssl.SslDiagnostics
 
isCertificateVerificationEnabled() - Method in enum class org.elasticsearch.common.ssl.SslVerificationMode
 
isConstructed() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
isDeprecated(String) - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
 
isHostnameVerificationEnabled() - Method in enum class org.elasticsearch.common.ssl.SslVerificationMode
 
isKeyEntry() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
 
isSystemDefault() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
isSystemDefault() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
isSystemDefault() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
 

K

KEY - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The path to a PEM formatted file that contains the private key for the configured SslConfigurationKeys.CERTIFICATE.
KEY_LEGACY_PASSPHRASE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password to read the configured SslConfigurationKeys.KEY, as a non-secure setting.
KEY_SECURE_PASSPHRASE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password to read the configured SslConfigurationKeys.KEY, as a secure setting.
keyConfig() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the keyConfig record component.
KEYSTORE_ALGORITHM - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The key management algorithm to use when constructing a Key manager from a keystore.
KEYSTORE_LEGACY_KEY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password for the key within the configured keystore, as a non-secure setting.
KEYSTORE_LEGACY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password for the file configured in SslConfigurationKeys.KEYSTORE_PATH, as a non-secure setting.
KEYSTORE_PATH - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The path to a KeyStore file (in a format supported by this JRE) that should be used for key management
KEYSTORE_SECURE_KEY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password for the key within the configured keystore, as a secure setting.
KEYSTORE_SECURE_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password for the file configured in SslConfigurationKeys.KEYSTORE_PATH, as a secure setting.
KEYSTORE_TYPE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The keystore type for the file configured in SslConfigurationKeys.KEYSTORE_PATH.
KeyStoreUtil - Class in org.elasticsearch.common.ssl
A variety of utility methods for working with or constructing KeyStore instances.
KeyStoreUtil.KeyStoreEntry - Class in org.elasticsearch.common.ssl
 

L

length - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
load(Path) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Resolve all necessary configuration settings, and load a SslConfiguration.

N

NONE - Enum constant in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
Never request a client certificate.
NONE - Enum constant in enum class org.elasticsearch.common.ssl.SslVerificationMode
Verify neither the hostname, nor the provided certificate.

O

OPTIONAL - Enum constant in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
Request a client certificate, but do not enforce that one is provided.
org.elasticsearch.common.ssl - package org.elasticsearch.common.ssl
 
org.elasticsearch.sslconfig - module org.elasticsearch.sslconfig
 

P

parse(String) - Static method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
 
parse(String) - Static method in enum class org.elasticsearch.common.ssl.SslVerificationMode
 
parseForRestrictedTrust(String) - Static method in enum class org.elasticsearch.common.ssl.X509Field
 
parsePKCS8PemString(String) - Static method in class org.elasticsearch.common.ssl.PemUtils
Creates a PrivateKey from a String that contains the PEM encoded representation of a plaintext private key encoded in PKCS8
path() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns the value of the path record component.
PemKeyConfig - Class in org.elasticsearch.common.ssl
A SslKeyConfig that reads from PEM formatted paths.
PemKeyConfig(String, String, char[], Path) - Constructor for class org.elasticsearch.common.ssl.PemKeyConfig
 
PemTrustConfig - Class in org.elasticsearch.common.ssl
A SslTrustConfig that reads a list of PEM encoded trusted certificates (CAs) from the file system.
PemTrustConfig(List<String>, Path) - Constructor for class org.elasticsearch.common.ssl.PemTrustConfig
Construct a new trust config for the provided paths (which will be resolved relative to the basePath).
PemUtils - Class in org.elasticsearch.common.ssl
 
PROTOCOLS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The SSL/TLS protocols (i.e.

R

readAsn1Object() - Method in class org.elasticsearch.common.ssl.DerParser
 
readAsn1Object(int) - Method in class org.elasticsearch.common.ssl.DerParser
Read an object and verify its type
readCertificates(Collection<Path>) - Static method in class org.elasticsearch.common.ssl.PemUtils
 
readKeyStore(Path, String, char[]) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
Read the given keystore file.
readPrivateKey(Path, Supplier<char[]>) - Static method in class org.elasticsearch.common.ssl.PemUtils
Creates a PrivateKey from the contents of a file and handles any exceptions
REQUIRED - Enum constant in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
Request and require a client certificate.
resolvePath(String, Path) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
 

S

SAN_DNS - Enum constant in enum class org.elasticsearch.common.ssl.X509Field
 
SAN_OTHERNAME_COMMONNAME - Enum constant in enum class org.elasticsearch.common.ssl.X509Field
 
SERVER - Enum constant in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
 
setDefaultCiphers(List<String>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Change the default supported ciphers.
setDefaultClientAuth(SslClientAuthenticationMode) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Change the default client authentication mode.
setDefaultKeyConfig(SslKeyConfig) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Change the default key config.
setDefaultProtocols(List<String>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Change the default SSL/TLS protocol list.
setDefaultRestrictedTrustFields(List<X509Field>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
 
setDefaultTrustConfig(SslTrustConfig) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Change the default trust config.
setDefaultVerificationMode(SslVerificationMode) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Change the default verification mode.
setKeyStoreFilter(Function<KeyStore, KeyStore>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
Apply a filter function to any keystore that is loaded.
settingPrefix() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the settingPrefix record component.
SslClientAuthenticationMode - Enum Class in org.elasticsearch.common.ssl
The client authentication mode that is used for SSL servers.
SslConfigException - Exception Class in org.elasticsearch.common.ssl
A base exception for problems that occur while trying to configure SSL.
SslConfigException(String) - Constructor for exception class org.elasticsearch.common.ssl.SslConfigException
 
SslConfigException(String, Exception) - Constructor for exception class org.elasticsearch.common.ssl.SslConfigException
 
SslConfiguration - Record Class in org.elasticsearch.common.ssl
A object encapsulating all necessary configuration for an SSL context (client or server).
SslConfiguration(String, boolean, SslTrustConfig, SslKeyConfig, SslVerificationMode, SslClientAuthenticationMode, List<String>, List<String>) - Constructor for record class org.elasticsearch.common.ssl.SslConfiguration
Creates an instance of a SslConfiguration record class.
SslConfigurationKeys - Class in org.elasticsearch.common.ssl
Utility class for handling the standard setting keys for use in SSL configuration.
SslConfigurationLoader - Class in org.elasticsearch.common.ssl
Loads SslConfiguration from settings.
SslConfigurationLoader(String) - Constructor for class org.elasticsearch.common.ssl.SslConfigurationLoader
Construct a new loader with the "standard" default values.
SslDiagnostics - Class in org.elasticsearch.common.ssl
 
SslDiagnostics(Clock) - Constructor for class org.elasticsearch.common.ssl.SslDiagnostics
 
SslDiagnostics.PeerType - Enum Class in org.elasticsearch.common.ssl
 
SslKeyConfig - Interface in org.elasticsearch.common.ssl
An interface for building a key manager at runtime.
SslTrustConfig - Interface in org.elasticsearch.common.ssl
An interface for building a trust manager at runtime.
SslUtil - Class in org.elasticsearch.common.ssl
 
SslVerificationMode - Enum Class in org.elasticsearch.common.ssl
Represents the verification mode to be used for SSL connections.
StoredCertificate - Record Class in org.elasticsearch.common.ssl
Information about a certificate that is locally stored.It includes a reference to the X509Certificate itself, as well as information about where it was loaded from.
StoredCertificate(X509Certificate, String, String, String, boolean) - Constructor for record class org.elasticsearch.common.ssl.StoredCertificate
Creates an instance of a StoredCertificate record class.
StoreKeyConfig - Class in org.elasticsearch.common.ssl
A SslKeyConfig that builds a Key Manager from a keystore file.
StoreKeyConfig(String, char[], String, Function<KeyStore, KeyStore>, char[], String, Path) - Constructor for class org.elasticsearch.common.ssl.StoreKeyConfig
 
StoreTrustConfig - Class in org.elasticsearch.common.ssl
A SslTrustConfig that builds a Trust Manager from a keystore file.
StoreTrustConfig(String, char[], String, String, boolean, Path) - Constructor for class org.elasticsearch.common.ssl.StoreTrustConfig
 
stream(KeyStore, Function<GeneralSecurityException, ? extends RuntimeException>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
 
supportedProtocols() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the supportedProtocols record component.

T

tag - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
toString() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
 
toString() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
 
toString() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
 
toString() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
 
toString() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
 
toString() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns a string representation of this record class.
toString() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
Returns a string representation of this record class.
toString() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
 
toString() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
 
toString() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
 
toString() - Method in enum class org.elasticsearch.common.ssl.X509Field
 
TRUST_EVERYTHING - Static variable in class org.elasticsearch.common.ssl.TrustEverythingConfig
 
TRUST_RESTRICTIONS_X509_FIELDS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The fields from the X509 certificate used for restricted trust.
trustConfig() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the trustConfig record component.
TrustEverythingConfig - Class in org.elasticsearch.common.ssl
A SslTrustConfig that trusts all certificates.
TRUSTSTORE_ALGORITHM - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The trust management algorithm to use when configuring trust with a truststore.
TRUSTSTORE_LEGACY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password for the file configured in SslConfigurationKeys.TRUSTSTORE_PATH, as a non-secure setting.
TRUSTSTORE_PATH - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The path to a KeyStore file (in a format supported by this JRE) that should be used as a trust-store
TRUSTSTORE_SECURE_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The password for the file configured in SslConfigurationKeys.TRUSTSTORE_PATH, as a secure setting.
TRUSTSTORE_TYPE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
The keystore type for the file configured in SslConfigurationKeys.TRUSTSTORE_PATH.
type - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 

V

value - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
 
valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.SslVerificationMode
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.X509Field
Returns the enum constant of this class with the specified name.
values() - Static method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.elasticsearch.common.ssl.SslVerificationMode
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.elasticsearch.common.ssl.X509Field
Returns an array containing the constants of this enum class, in the order they are declared.
VERIFICATION_MODE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
Whether certificate and/or hostname verification should be used
verificationMode() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
Returns the value of the verificationMode record component.

W

warning(String, GeneralSecurityException) - Method in interface org.elasticsearch.common.ssl.DiagnosticTrustManager.DiagnosticLogger
 

X

X509Field - Enum Class in org.elasticsearch.common.ssl
An enumeration for referencing parts of an X509 certificate by a canonical string value.
A B C D E F G H I K L N O P R S T V W X 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form