Index

A B C D E G I P S V X
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

acceptAnySpiffeId() - Method in class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions.SslContextOptionsBuilder

acceptedSpiffeIdsSupplier(Supplier<Set<SpiffeId>>) - Method in class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions.SslContextOptionsBuilder

ALGORITHM - Static variable in class io.spiffe.provider.SpiffeProviderConstants

The algorithm name for the KeyStore and TrustStore.

AllowedIdSupplierSpiffeIdVerifier - Class in io.spiffe.provider

AllowedIdSupplierSpiffeIdVerifier(Supplier<Set<SpiffeId>>) - Constructor for class io.spiffe.provider.AllowedIdSupplierSpiffeIdVerifier

B

build() - Method in class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions.SslContextOptionsBuilder

builder() - Static method in class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions

C

checkClientTrusted(X509Certificate[], String) - Method in class io.spiffe.provider.SpiffeTrustManager

Given the partial or complete certificate chain provided by the peer, build a certificate path to a trusted root and return if it can be validated and is trusted for Client SSL authentication based on the authentication type.

checkClientTrusted(X509Certificate[], String, Socket) - Method in class io.spiffe.provider.SpiffeTrustManager

SpiffeTrustManager.checkClientTrusted(X509Certificate[], String)

checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class io.spiffe.provider.SpiffeTrustManager

SpiffeTrustManager.checkClientTrusted(X509Certificate[], String)

checkServerTrusted(X509Certificate[], String) - Method in class io.spiffe.provider.SpiffeTrustManager

Given the partial or complete certificate chain provided by the peer, build a certificate path to a trusted root and return if it can be validated and is trusted for Server SSL authentication based on the authentication type.

checkServerTrusted(X509Certificate[], String, Socket) - Method in class io.spiffe.provider.SpiffeTrustManager

SpiffeTrustManager.checkServerTrusted(X509Certificate[], String)

checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class io.spiffe.provider.SpiffeTrustManager

SpiffeTrustManager.checkServerTrusted(X509Certificate[], String)

chooseClientAlias(String[], Principal[], Socket) - Method in class io.spiffe.provider.SpiffeKeyManager

chooseEngineClientAlias(String[], Principal[], SSLEngine) - Method in class io.spiffe.provider.SpiffeKeyManager

chooseEngineServerAlias(String, Principal[], SSLEngine) - Method in class io.spiffe.provider.SpiffeKeyManager

chooseServerAlias(String, Principal[], Socket) - Method in class io.spiffe.provider.SpiffeKeyManager

createSocket() - Method in class io.spiffe.provider.SpiffeSslSocketFactory

createSocket(String, int) - Method in class io.spiffe.provider.SpiffeSslSocketFactory

createSocket(String, int, InetAddress, int) - Method in class io.spiffe.provider.SpiffeSslSocketFactory

createSocket(InetAddress, int) - Method in class io.spiffe.provider.SpiffeSslSocketFactory

createSocket(InetAddress, int, InetAddress, int) - Method in class io.spiffe.provider.SpiffeSslSocketFactory

createSocket(Socket, String, int, boolean) - Method in class io.spiffe.provider.SpiffeSslSocketFactory

D

DEFAULT_ALIAS - Static variable in class io.spiffe.provider.SpiffeProviderConstants

Alias used by the SpiffeKeyStore.

E

engineAliases() - Method in class io.spiffe.provider.SpiffeKeyStore

engineContainsAlias(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineDeleteEntry(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineGetCertificate(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineGetCertificateAlias(Certificate) - Method in class io.spiffe.provider.SpiffeKeyStore

engineGetCertificateChain(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineGetCreationDate(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineGetKey(String, char[]) - Method in class io.spiffe.provider.SpiffeKeyStore

engineGetKeyManagers() - Method in class io.spiffe.provider.SpiffeKeyManagerFactory

Default method for creating the KeyManager, uses an DefaultX509Source instance that is handled by the Singleton X509SourceManager

engineGetKeyManagers(X509SvidSource) - Method in class io.spiffe.provider.SpiffeKeyManagerFactory

Creates a new key manager and initializes it with the given X.509 SVID source.

engineGetTrustManagers() - Method in class io.spiffe.provider.SpiffeTrustManagerFactory

Creates a TrustManager initialized with the DefaultX509Source instance that is handled by the X509SourceManager, and with and a supplier of accepted SPIFFE IDs.

engineGetTrustManagers(BundleSource<X509Bundle>) - Method in class io.spiffe.provider.SpiffeTrustManagerFactory

Creates a TrustManager initialized with the BundleSource to provide X.509 bundles, and with and a supplier of accepted SPIFFE IDs.

engineGetTrustManagers(BundleSource<X509Bundle>, Supplier<Set<SpiffeId>>) - Method in class io.spiffe.provider.SpiffeTrustManagerFactory

Creates a TrustManager initialized with a BundleSource to provide X.509 bundles, and a supplier of accepted SPIFFE IDs.

engineGetTrustManagersAcceptAnySpiffeId(BundleSource<X509Bundle>) - Method in class io.spiffe.provider.SpiffeTrustManagerFactory

Creates a TrustManager initialized with a BundleSource to provide the X.509 bundles.

engineInit(KeyStore) - Method in class io.spiffe.provider.SpiffeTrustManagerFactory

engineInit(KeyStore, char[]) - Method in class io.spiffe.provider.SpiffeKeyManagerFactory

engineInit(ManagerFactoryParameters) - Method in class io.spiffe.provider.SpiffeKeyManagerFactory

engineInit(ManagerFactoryParameters) - Method in class io.spiffe.provider.SpiffeTrustManagerFactory

engineIsCertificateEntry(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineIsKeyEntry(String) - Method in class io.spiffe.provider.SpiffeKeyStore

engineLoad(InputStream, char[]) - Method in class io.spiffe.provider.SpiffeKeyStore

engineSetCertificateEntry(String, Certificate) - Method in class io.spiffe.provider.SpiffeKeyStore

engineSetKeyEntry(String, byte[], Certificate[]) - Method in class io.spiffe.provider.SpiffeKeyStore

engineSetKeyEntry(String, Key, char[], Certificate[]) - Method in class io.spiffe.provider.SpiffeKeyStore

engineSize() - Method in class io.spiffe.provider.SpiffeKeyStore

engineStore(OutputStream, char[]) - Method in class io.spiffe.provider.SpiffeKeyStore

G

getAcceptedIssuers() - Method in class io.spiffe.provider.SpiffeTrustManager

getCertificateChain(String) - Method in class io.spiffe.provider.SpiffeKeyManager

Returns the X.509 certificates chain associated with the given alias.

getClientAliases(String, Principal[]) - Method in class io.spiffe.provider.SpiffeKeyManager

getDefaultCipherSuites() - Method in class io.spiffe.provider.SpiffeSslSocketFactory

getPrivateKey(String) - Method in class io.spiffe.provider.SpiffeKeyManager

Returns the private key handled by this key manager.

getServerAliases(String, Principal[]) - Method in class io.spiffe.provider.SpiffeKeyManager

getSslContext(SpiffeSslContextFactory.SslContextOptions) - Static method in class io.spiffe.provider.SpiffeSslContextFactory

Creates an SSLContext initialized with a SpiffeKeyManager and SpiffeTrustManager that are backed by the Workload API via an DefaultX509Source.

getSupportedCipherSuites() - Method in class io.spiffe.provider.SpiffeSslSocketFactory

getX509Source() - Static method in class io.spiffe.provider.X509SourceManager

Returns the single instance handled by this singleton.

I

install() - Static method in class io.spiffe.provider.SpiffeProvider

Installs this provider implementation.

io.spiffe.provider - package io.spiffe.provider

io.spiffe.provider.exception - package io.spiffe.provider.exception

P

PROVIDER_NAME - Static variable in class io.spiffe.provider.SpiffeProviderConstants

The name of this Provider implementation.

S

SpiffeIdVerifier - Interface in io.spiffe.provider

SpiffeKeyManager - Class in io.spiffe.provider

Represents an X.509 key manager for the SPIFFE provider.

SpiffeKeyManager(X509SvidSource) - Constructor for class io.spiffe.provider.SpiffeKeyManager

Constructor.

SpiffeKeyManagerFactory - Class in io.spiffe.provider

Implementation of a KeyManagerFactorySpi to create a KeyManager that is backed by the Workload API.

SpiffeKeyManagerFactory() - Constructor for class io.spiffe.provider.SpiffeKeyManagerFactory

SpiffeKeyStore - Class in io.spiffe.provider

This class is required by the Java Provider Architecture, but since this Provider doesn't use certificates stored in a KeyStore, the only purpose of this class is to return the ALIAS that is handled by this SPIFFE Provider implementation.

SpiffeKeyStore() - Constructor for class io.spiffe.provider.SpiffeKeyStore

SpiffeProvider - Class in io.spiffe.provider

Represents a Security Provider for the Java Security API that supports SPIFFE X.509-SVIDs and Bundles fetched from the Workload API.

SpiffeProvider() - Constructor for class io.spiffe.provider.SpiffeProvider

Constructor.

SpiffeProviderConstants - Class in io.spiffe.provider

SPIFFE Provider constants.

SpiffeProviderException - Exception Class in io.spiffe.provider.exception

Unchecked exception thrown when there is an error setting up the source of SVIDs and bundles.

SpiffeProviderException(String) - Constructor for exception class io.spiffe.provider.exception.SpiffeProviderException

SpiffeProviderException(String, Throwable) - Constructor for exception class io.spiffe.provider.exception.SpiffeProviderException

SpiffeSslContextFactory - Class in io.spiffe.provider

Utility class to create instances of SSLContext initialized with a SpiffeKeyManager and a SpiffeTrustManager that are backed by the Workload API.

SpiffeSslContextFactory.SslContextOptions - Class in io.spiffe.provider

Options for creating a new SSLContext.

SpiffeSslContextFactory.SslContextOptions.SslContextOptionsBuilder - Class in io.spiffe.provider

SpiffeSslSocketFactory - Class in io.spiffe.provider

Implementation of SSLSocketFactory that provides methods to create SSLSocket backed by a SPIFFE SSLContext SpiffeSslContextFactory.

SpiffeSslSocketFactory() - Constructor for class io.spiffe.provider.SpiffeSslSocketFactory

Default Constructor.

SpiffeSslSocketFactory(SpiffeSslContextFactory.SslContextOptions) - Constructor for class io.spiffe.provider.SpiffeSslSocketFactory

Constructor.

SpiffeTrustManager - Class in io.spiffe.provider

Implementation of an X.509 TrustManager for the SPIFFE Provider.

SpiffeTrustManager(BundleSource<X509Bundle>) - Constructor for class io.spiffe.provider.SpiffeTrustManager

Constructor.

SpiffeTrustManager(BundleSource<X509Bundle>, SpiffeIdVerifier) - Constructor for class io.spiffe.provider.SpiffeTrustManager

Constructor.

SpiffeTrustManager(BundleSource<X509Bundle>, Supplier<Set<SpiffeId>>) - Constructor for class io.spiffe.provider.SpiffeTrustManager

Constructor.

SpiffeTrustManagerFactory - Class in io.spiffe.provider

Implementation of a TrustManagerFactory to create a SpiffeTrustManager backed by a DefaultX509Source that is maintained via the Workload API.

SpiffeTrustManagerFactory() - Constructor for class io.spiffe.provider.SpiffeTrustManagerFactory

SpiffeVerificationException - Exception Class in io.spiffe.provider

This class indicates there was a problem verifying a peer's SPIFFE ID.

SpiffeVerificationException(String) - Constructor for exception class io.spiffe.provider.SpiffeVerificationException

SSL_SPIFFE_ACCEPT_ALL_PROPERTY - Static variable in class io.spiffe.provider.SpiffeProviderConstants

Name of the property to be used as flag for accepting any SPIFFE IDs.

SSL_SPIFFE_ACCEPT_PROPERTY - Static variable in class io.spiffe.provider.SpiffeProviderConstants

Name of the property to get the Set of accepted SPIFFE IDs.

SslContextOptions(String, X509Source, Supplier<Set<SpiffeId>>, boolean) - Constructor for class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions

sslProtocol(String) - Method in class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions.SslContextOptionsBuilder

V

verify(SpiffeId, X509Certificate[]) - Method in class io.spiffe.provider.AllowedIdSupplierSpiffeIdVerifier

verify(SpiffeId, X509Certificate[]) - Method in interface io.spiffe.provider.SpiffeIdVerifier

Verify that an X509-SVID is acceptable.

X

x509Source(X509Source) - Method in class io.spiffe.provider.SpiffeSslContextFactory.SslContextOptions.SslContextOptionsBuilder

X509SourceManager - Class in io.spiffe.provider

Singleton that handles an instance of a DefaultX509Source that implements an X509Source.

A B C D E G I P S V X
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form