Interface SniX509ExtendedKeyManager.SniSelector

All Known Implementing Classes:
Enclosing class:
Functional Interface:
This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface public static interface SniX509ExtendedKeyManager.SniSelector

Selects a certificate based on SNI information.

  • Field Details

  • Method Details

    • sniSelect

      String sniSelect(String keyType, Principal[] issuers, SSLSession session, String sniHost, Collection<X509> certificates) throws SSLHandshakeException

      Selects a certificate based on SNI information.

      This method may be invoked multiple times during the TLS handshake, with different parameters. For example, the keyType could be different, and subsequently the collection of certificates (because they need to match the keyType).

      keyType - the key algorithm type name
      issuers - the list of acceptable CA issuer subject names or null if it does not matter which issuers are used
      session - the TLS handshake session or null if not known.
      sniHost - the server name indication sent by the client, or null if the client did not send the server name indication
      certificates - the list of certificates matching keyType and issuers known to this SslContextFactory
      the alias of the certificate to return to the client, from the certificates list, or DELEGATE if the certificate choice should be delegated to the nested key manager or null for no match.
      SSLHandshakeException - if the TLS handshake should be aborted