com.aerospike.client.policy

Class TlsPolicy

java.lang.Object

com.aerospike.client.policy.TlsPolicy

public final class TlsPolicy
extends Object

TLS connection policy. Secure TLS connections are only supported for AerospikeClient synchronous commands.

Field Summary

Fields

Modifier and Type	Field and Description
String[]	ciphers Allowable TLS ciphers that the client can use for secure connections.
SSLContext	context Optional SSLContext configuration instead using default SSLContext.
boolean	forLoginOnly Use TLS connections only for login authentication.
String[]	protocols Allowable TLS protocols that the client can use for secure connections.
BigInteger[]	revokeCertificates Reject certificates whose serial numbers match a serial number in this array.

Constructor Summary

Constructors

Constructor and Description
TlsPolicy() Default constructor.
TlsPolicy(TlsPolicy other) Copy TLS policy from another TLS policy.

Method Summary

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

context

public SSLContext context

Optional SSLContext configuration instead using default SSLContext.

Default: null (use default SSLContext).

protocols

public String[] protocols

Allowable TLS protocols that the client can use for secure connections. Available cipher names can be obtained by SSLSocket.getSupportedProtocols() Multiple protocols can be specified. Example:

 
 TlsPolicy policy = new TlsPolicy();
 policy.protocols = new String[] {"TLSv1", "TLSv1.1", "TLSv1.2"};
 
 

Default: TLSv1.2 (Only allow TLSv1.2 protocol)

ciphers

public String[] ciphers

Allowable TLS ciphers that the client can use for secure connections. Available cipher names can be obtained by SSLSocket.getSupportedCipherSuites() Multiple ciphers can be specified. Default: null (Allow default ciphers defined by JVM)

revokeCertificates

public BigInteger[] revokeCertificates

Reject certificates whose serial numbers match a serial number in this array. Default: null (Do not exclude by certificate serial number)

forLoginOnly

public boolean forLoginOnly

Use TLS connections only for login authentication. All other communication with the server will be done with non-TLS connections. Default: false (Use TLS connections for all communication with server.)

Constructor Detail

TlsPolicy

public TlsPolicy(TlsPolicy other)

Copy TLS policy from another TLS policy.

TlsPolicy

public TlsPolicy()

Default constructor.