Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- alias() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns the value of the
alias
record component. - asTrustConfig() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- asTrustConfig() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
-
Create a
SslTrustConfig
based on the underlying file store that backs this key config - asTrustConfig() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
B
- buildDefaultTrustConfig(SslTrustConfig, SslKeyConfig) - Static method in class org.elasticsearch.common.ssl.SslConfigurationLoader
- buildKeyConfig(Path) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
- buildKeyStore(Collection<Certificate>, PrivateKey, char[]) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Construct an in-memory keystore with a single key entry.
- buildTrustConfig(Path, SslVerificationMode, SslKeyConfig, Set<X509Field>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
- buildTrustStore(Iterable<Certificate>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Construct an in-memory keystore with multiple trusted cert entries.
- buildTrustStore(Iterable<Certificate>, String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
C
- calculateFingerprint(X509Certificate, String) - Static method in class org.elasticsearch.common.ssl.SslUtil
- certificate() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns the value of the
certificate
record component. - CERTIFICATE - Enum constant in enum class org.elasticsearch.common.ssl.SslVerificationMode
-
Verify the provided certificate against the trust chain, but do not verify the hostname.
- CERTIFICATE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The path to a PEM formatted file that contains the certificate to be used as part of key management
- CERTIFICATE_AUTHORITIES - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
A list of paths to PEM formatted certificates that should be trusted as CAs
- checkClientTrusted(X509Certificate[], String) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- checkClientTrusted(X509Certificate[], String, Socket) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- checkIssuerTrust(Map<String, List<X509Certificate>>, X509Certificate) - Static method in class org.elasticsearch.common.ssl.SslDiagnostics
- checkServerTrusted(X509Certificate[], String) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- checkServerTrusted(X509Certificate[], String, Socket) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- ciphers() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
ciphers
record component. - CIPHERS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The SSL/TLS cipher suites that should be used
- CLIENT - Enum constant in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
- CLIENT_AUTH - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
When operating as a server, whether to request/require client certificates
- clientAuth() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
clientAuth
record component. - CompositeTrustConfig - Class in org.elasticsearch.common.ssl
-
A TrustConfiguration that merges trust anchors from a number of other trust configs to produce a single
X509ExtendedTrustManager
. - configure(SSLParameters) - Method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
-
Configure client authentication of the provided
SSLParameters
- createKeyManager() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
- createKeyManager() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- createKeyManager() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
- createKeyManager() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- createKeyManager(Certificate[], PrivateKey, char[]) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Returns a
X509ExtendedKeyManager
that is built from the provided private key and certificate chain - createKeyManager(KeyStore, char[], String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Creates a
X509ExtendedKeyManager
based on the key material in the providedKeyStore
- createSslContext() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Dynamically create a new SSL context based on the current state of the configuration.
- createTrustManager() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- createTrustManager() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- createTrustManager() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
- createTrustManager() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
- createTrustManager() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
- createTrustManager() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
- createTrustManager(KeyStore, String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Creates a
X509ExtendedTrustManager
based on the trust material in the providedKeyStore
- createTrustManager(Collection<Certificate>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Creates a
X509ExtendedTrustManager
based on the provided certificates
D
- DEFAULT_INSTANCE - Static variable in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- DefaultJdkTrustConfig - Class in org.elasticsearch.common.ssl
-
This class represents a trust configuration that corresponds to the default trusted CAs of the JDK
- delete() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
-
Remove this entry from the underlying keystore
- DerParser - Class in org.elasticsearch.common.ssl
-
A bare-minimum ASN.1 DER decoder, just having enough functions to decode PKCS#1 private keys in order to remain JCE/JVM agnostic.
- DerParser(byte[]) - Constructor for class org.elasticsearch.common.ssl.DerParser
- DerParser.Asn1Object - Class in org.elasticsearch.common.ssl
-
An ASN.1 TLV.
- describeValidHostnames(X509Certificate) - Static method in class org.elasticsearch.common.ssl.SslDiagnostics
- DiagnosticTrustManager - Class in org.elasticsearch.common.ssl
- DiagnosticTrustManager(X509ExtendedTrustManager, Supplier<String>, DiagnosticTrustManager.DiagnosticLogger) - Constructor for class org.elasticsearch.common.ssl.DiagnosticTrustManager
- DiagnosticTrustManager.DiagnosticLogger - Interface in org.elasticsearch.common.ssl
-
This interface exists because the ssl-config library does not depend on log4j, however the whole purpose of this class is to log diagnostic messages, so it must be provided with a function by which it can do that.
E
- EmptyKeyConfig - Class in org.elasticsearch.common.ssl
-
A
SslKeyConfig
that does nothing (provides a null key manager) - enabled() - Method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
- equals(Object) - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- equals(Object) - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- equals(Object) - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- equals(Object) - Method in class org.elasticsearch.common.ssl.PemTrustConfig
- equals(Object) - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- equals(Object) - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
- explicitlyConfigured() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
explicitlyConfigured
record component.
F
- filter(KeyStore, Predicate<KeyStoreUtil.KeyStoreEntry>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Filters a keystore using a predicate.
- format() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns the value of the
format
record component. - FULL - Enum constant in enum class org.elasticsearch.common.ssl.SslVerificationMode
-
Verify the provided certificate against the trust chain, and also verify that the hostname to which this client is connected matches one of the Subject-Alternative-Names in the certificate.
G
- getAcceptedIssuers() - Method in class org.elasticsearch.common.ssl.DiagnosticTrustManager
- getAlias() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
- getCipherSuites() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
- getConfiguredCertificates() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
- getConfiguredCertificates() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
- getConfiguredCertificates() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
- getConfiguredCertificates() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
- getDependentFiles() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
- getDependentFiles() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
- getDependentFiles() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
- getDependentFiles() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
- getInteger() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
-
Get the value as integer
- getKey(char[]) - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
-
If the current entry stores a private key, returns that key.
- getKeys() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
- getKeys() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- getKeys() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
- getKeys() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
-
Equivalent to
getKeys(false)
. - getKeys(boolean) - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
-
Return the list of keys inside the configured keystore, optionally applying the
filter
that was set during construction. - getLength() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- getListKeys() - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The list of keys that are used to load a non-secure, list setting
- getOid() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- getParser() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
-
For constructed field, return a parser for its content.
- getSecureSetting(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Clients of this class should implement this method to load a fully-qualified key from the preferred secure settings source.
- getSecureStringKeys() - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The list of keys that are used to load a secure setting (such as a password) that would typically be stored in the elasticsearch keystore.
- getSettingAsList(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Clients of this class should implement this method to load a fully-qualified key from the preferred settings source.
- getSettingAsString(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Clients of this class should implement this method to load a fully-qualified key from the preferred settings source.
- getString() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- getStringKeys() - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The list of keys that are used to load a non-secure, non-list setting
- getTrustDiagnosticFailure(X509Certificate[], SslDiagnostics.PeerType, SSLSession, String, Map<String, List<X509Certificate>>) - Method in class org.elasticsearch.common.ssl.SslDiagnostics
- getType() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- getValue() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- getX509Certificate() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
-
If this entry is a private key entry (see
KeyStoreUtil.KeyStoreEntry.isKeyEntry()
), and the entry includes a certificate chain, and the leaf (first) element of that chain is an X.509 certificate, then that leaf certificate is returned. - getX509CertificateChain() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
-
If this entry is a private key entry (see
KeyStoreUtil.KeyStoreEntry.isKeyEntry()
), returns the certificate chain that is stored in the entry. - GLOBAL_DEFAULT_RESTRICTED_TRUST_FIELDS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationLoader
H
- hashCode() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- hashCode() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- hashCode() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- hashCode() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
- hashCode() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns a hash code value for this object.
- hashCode() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns a hash code value for this object.
- hashCode() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- hashCode() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
- hasKeyMaterial() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
- hasKeyMaterial() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- hasKeyMaterial() - Method in interface org.elasticsearch.common.ssl.SslKeyConfig
- hasKeyMaterial() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- hasPrivateKey() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns the value of the
hasPrivateKey
record component. - hasSettings(String) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Clients of this class should implement this method to determine whether there are any settings for a given prefix.
I
- inferKeyStoreType(String) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Make a best guess about the "type" (see
KeyStore.getType()
) of the keystore file located at the givenPath
. - INSTANCE - Static variable in class org.elasticsearch.common.ssl.EmptyKeyConfig
- INSTANCE - Static variable in class org.elasticsearch.common.ssl.SslDiagnostics
- isCertificateVerificationEnabled() - Method in enum class org.elasticsearch.common.ssl.SslVerificationMode
- isConstructed() - Method in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- isDeprecated(String) - Static method in class org.elasticsearch.common.ssl.SslConfigurationKeys
- isHostnameVerificationEnabled() - Method in enum class org.elasticsearch.common.ssl.SslVerificationMode
- isKeyEntry() - Method in class org.elasticsearch.common.ssl.KeyStoreUtil.KeyStoreEntry
- isSystemDefault() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- isSystemDefault() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- isSystemDefault() - Method in interface org.elasticsearch.common.ssl.SslTrustConfig
K
- KEY - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The path to a PEM formatted file that contains the private key for the configured
SslConfigurationKeys.CERTIFICATE
. - KEY_LEGACY_PASSPHRASE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password to read the configured
SslConfigurationKeys.KEY
, as a non-secure setting. - KEY_SECURE_PASSPHRASE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password to read the configured
SslConfigurationKeys.KEY
, as a secure setting. - keyConfig() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
keyConfig
record component. - KEYSTORE_ALGORITHM - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The
key management algorithm
to use when constructing a Key manager from akeystore
. - KEYSTORE_LEGACY_KEY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password for the key within the
configured keystore
, as a non-secure setting. - KEYSTORE_LEGACY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password for the file configured in
SslConfigurationKeys.KEYSTORE_PATH
, as a non-secure setting. - KEYSTORE_PATH - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The path to a KeyStore file (in a format supported by this JRE) that should be used for key management
- KEYSTORE_SECURE_KEY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password for the key within the
configured keystore
, as a secure setting. - KEYSTORE_SECURE_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password for the file configured in
SslConfigurationKeys.KEYSTORE_PATH
, as a secure setting. - KEYSTORE_TYPE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The
keystore type
for the file configured inSslConfigurationKeys.KEYSTORE_PATH
. - KeyStoreUtil - Class in org.elasticsearch.common.ssl
-
A variety of utility methods for working with or constructing
KeyStore
instances. - KeyStoreUtil.KeyStoreEntry - Class in org.elasticsearch.common.ssl
L
- length - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- load(Path) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Resolve all necessary configuration settings, and load a
SslConfiguration
.
N
- NONE - Enum constant in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
-
Never request a client certificate.
- NONE - Enum constant in enum class org.elasticsearch.common.ssl.SslVerificationMode
-
Verify neither the hostname, nor the provided certificate.
O
- OPTIONAL - Enum constant in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
-
Request a client certificate, but do not enforce that one is provided.
- org.elasticsearch.common.ssl - package org.elasticsearch.common.ssl
- org.elasticsearch.sslconfig - module org.elasticsearch.sslconfig
P
- parse(String) - Static method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
- parse(String) - Static method in enum class org.elasticsearch.common.ssl.SslVerificationMode
- parseForRestrictedTrust(String) - Static method in enum class org.elasticsearch.common.ssl.X509Field
- parsePKCS8PemString(String) - Static method in class org.elasticsearch.common.ssl.PemUtils
-
Creates a
PrivateKey
from a String that contains the PEM encoded representation of a plaintext private key encoded in PKCS8 - path() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns the value of the
path
record component. - PemKeyConfig - Class in org.elasticsearch.common.ssl
-
A
SslKeyConfig
that reads from PEM formatted paths. - PemKeyConfig(String, String, char[], Path) - Constructor for class org.elasticsearch.common.ssl.PemKeyConfig
- PemTrustConfig - Class in org.elasticsearch.common.ssl
-
A
SslTrustConfig
that reads a list of PEM encoded trusted certificates (CAs) from the file system. - PemTrustConfig(List<String>, Path) - Constructor for class org.elasticsearch.common.ssl.PemTrustConfig
-
Construct a new trust config for the provided paths (which will be resolved relative to the basePath).
- PemUtils - Class in org.elasticsearch.common.ssl
- PROTOCOLS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The SSL/TLS protocols (i.e.
R
- readAsn1Object() - Method in class org.elasticsearch.common.ssl.DerParser
- readAsn1Object(int) - Method in class org.elasticsearch.common.ssl.DerParser
-
Read an object and verify its type
- readCertificates(Collection<Path>) - Static method in class org.elasticsearch.common.ssl.PemUtils
- readKeyStore(Path, String, char[]) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
-
Read the given keystore file.
- readPrivateKey(Path, Supplier<char[]>) - Static method in class org.elasticsearch.common.ssl.PemUtils
-
Creates a
PrivateKey
from the contents of a file and handles any exceptions - REQUIRED - Enum constant in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
-
Request and require a client certificate.
- resolvePath(String, Path) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
S
- SAN_DNS - Enum constant in enum class org.elasticsearch.common.ssl.X509Field
- SAN_OTHERNAME_COMMONNAME - Enum constant in enum class org.elasticsearch.common.ssl.X509Field
- SERVER - Enum constant in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
- setDefaultCiphers(List<String>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Change the default supported ciphers.
- setDefaultClientAuth(SslClientAuthenticationMode) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Change the default client authentication mode.
- setDefaultKeyConfig(SslKeyConfig) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Change the default key config.
- setDefaultProtocols(List<String>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Change the default SSL/TLS protocol list.
- setDefaultRestrictedTrustFields(List<X509Field>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
- setDefaultTrustConfig(SslTrustConfig) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Change the default trust config.
- setDefaultVerificationMode(SslVerificationMode) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Change the default verification mode.
- setKeyStoreFilter(Function<KeyStore, KeyStore>) - Method in class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Apply a filter function to any keystore that is loaded.
- settingPrefix() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
settingPrefix
record component. - SslClientAuthenticationMode - Enum Class in org.elasticsearch.common.ssl
-
The client authentication mode that is used for SSL servers.
- SslConfigException - Exception Class in org.elasticsearch.common.ssl
-
A base exception for problems that occur while trying to configure SSL.
- SslConfigException(String) - Constructor for exception class org.elasticsearch.common.ssl.SslConfigException
- SslConfigException(String, Exception) - Constructor for exception class org.elasticsearch.common.ssl.SslConfigException
- SslConfiguration - Record Class in org.elasticsearch.common.ssl
-
A object encapsulating all necessary configuration for an SSL context (client or server).
- SslConfiguration(String, boolean, SslTrustConfig, SslKeyConfig, SslVerificationMode, SslClientAuthenticationMode, List<String>, List<String>) - Constructor for record class org.elasticsearch.common.ssl.SslConfiguration
-
Creates an instance of a
SslConfiguration
record class. - SslConfigurationKeys - Class in org.elasticsearch.common.ssl
-
Utility class for handling the standard setting keys for use in SSL configuration.
- SslConfigurationLoader - Class in org.elasticsearch.common.ssl
-
Loads
SslConfiguration
from settings. - SslConfigurationLoader(String) - Constructor for class org.elasticsearch.common.ssl.SslConfigurationLoader
-
Construct a new loader with the "standard" default values.
- SslDiagnostics - Class in org.elasticsearch.common.ssl
- SslDiagnostics(Clock) - Constructor for class org.elasticsearch.common.ssl.SslDiagnostics
- SslDiagnostics.PeerType - Enum Class in org.elasticsearch.common.ssl
- SslKeyConfig - Interface in org.elasticsearch.common.ssl
-
An interface for building a key manager at runtime.
- SslTrustConfig - Interface in org.elasticsearch.common.ssl
-
An interface for building a trust manager at runtime.
- SslUtil - Class in org.elasticsearch.common.ssl
- SslVerificationMode - Enum Class in org.elasticsearch.common.ssl
-
Represents the verification mode to be used for SSL connections.
- StoredCertificate - Record Class in org.elasticsearch.common.ssl
-
Information about a certificate that is locally stored.It includes a reference to the
X509Certificate
itself, as well as information about where it was loaded from. - StoredCertificate(X509Certificate, String, String, String, boolean) - Constructor for record class org.elasticsearch.common.ssl.StoredCertificate
-
Creates an instance of a
StoredCertificate
record class. - StoreKeyConfig - Class in org.elasticsearch.common.ssl
-
A
SslKeyConfig
that builds a Key Manager from a keystore file. - StoreKeyConfig(String, char[], String, Function<KeyStore, KeyStore>, char[], String, Path) - Constructor for class org.elasticsearch.common.ssl.StoreKeyConfig
- StoreTrustConfig - Class in org.elasticsearch.common.ssl
-
A
SslTrustConfig
that builds a Trust Manager from a keystore file. - StoreTrustConfig(String, char[], String, String, boolean, Path) - Constructor for class org.elasticsearch.common.ssl.StoreTrustConfig
- stream(KeyStore, Function<GeneralSecurityException, ? extends RuntimeException>) - Static method in class org.elasticsearch.common.ssl.KeyStoreUtil
- supportedProtocols() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
supportedProtocols
record component.
T
- tag - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- toString() - Method in class org.elasticsearch.common.ssl.CompositeTrustConfig
- toString() - Method in class org.elasticsearch.common.ssl.DefaultJdkTrustConfig
- toString() - Method in class org.elasticsearch.common.ssl.EmptyKeyConfig
- toString() - Method in class org.elasticsearch.common.ssl.PemKeyConfig
- toString() - Method in class org.elasticsearch.common.ssl.PemTrustConfig
- toString() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns a string representation of this record class.
- toString() - Method in record class org.elasticsearch.common.ssl.StoredCertificate
-
Returns a string representation of this record class.
- toString() - Method in class org.elasticsearch.common.ssl.StoreKeyConfig
- toString() - Method in class org.elasticsearch.common.ssl.StoreTrustConfig
- toString() - Method in class org.elasticsearch.common.ssl.TrustEverythingConfig
- toString() - Method in enum class org.elasticsearch.common.ssl.X509Field
- TRUST_EVERYTHING - Static variable in class org.elasticsearch.common.ssl.TrustEverythingConfig
- TRUST_RESTRICTIONS_X509_FIELDS - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The fields from the X509 certificate used for restricted trust.
- trustConfig() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
trustConfig
record component. - TrustEverythingConfig - Class in org.elasticsearch.common.ssl
-
A
SslTrustConfig
that trusts all certificates. - TRUSTSTORE_ALGORITHM - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The
trust management algorithm
to use when configuring trust with atruststore
. - TRUSTSTORE_LEGACY_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password for the file configured in
SslConfigurationKeys.TRUSTSTORE_PATH
, as a non-secure setting. - TRUSTSTORE_PATH - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The path to a KeyStore file (in a format supported by this JRE) that should be used as a trust-store
- TRUSTSTORE_SECURE_PASSWORD - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The password for the file configured in
SslConfigurationKeys.TRUSTSTORE_PATH
, as a secure setting. - TRUSTSTORE_TYPE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
The
keystore type
for the file configured inSslConfigurationKeys.TRUSTSTORE_PATH
. - type - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
V
- value - Variable in class org.elasticsearch.common.ssl.DerParser.Asn1Object
- valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.SslVerificationMode
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.common.ssl.X509Field
-
Returns the enum constant of this class with the specified name.
- values() - Static method in enum class org.elasticsearch.common.ssl.SslClientAuthenticationMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.common.ssl.SslDiagnostics.PeerType
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.common.ssl.SslVerificationMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.common.ssl.X509Field
-
Returns an array containing the constants of this enum class, in the order they are declared.
- VERIFICATION_MODE - Static variable in class org.elasticsearch.common.ssl.SslConfigurationKeys
-
Whether certificate and/or hostname verification should be used
- verificationMode() - Method in record class org.elasticsearch.common.ssl.SslConfiguration
-
Returns the value of the
verificationMode
record component.
W
- warning(String, GeneralSecurityException) - Method in interface org.elasticsearch.common.ssl.DiagnosticTrustManager.DiagnosticLogger
X
- X509Field - Enum Class in org.elasticsearch.common.ssl
-
An enumeration for referencing parts of an X509 certificate by a canonical string value.
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form