[CONF] Apache Camel > Camel Configuration Utilities

[confluence]

Camel Configuration Utilities Page edited by David Valeri Changes (12) ... h4. SSLContextParameters Note: All non-native classes are in the org.apache.camel.util.jsse package and all Spring Namespace elements are in the ????? namespace. || Java Field Name and Class \\ || Spring Namespace Attribute/Element and Type \\ || Description \\ || | cipherSuites - CipherSuitesParameters | sslContextParameters/ciphersuites - CipherSuitesParameters | This optional property represents a collection of explicitly named cipher suites to enable on both the client and server side as well as in the SSLEngine.  These values take precedence over filters supplied in cipherSuitesFilter.  The utility attempts to enable the listed cipher suites regardless of whether or not the JSSE provider actually supports them or not.  This behavior guarantees that listed cipher suites are always enabled when listed.  For a more lenient option, use cipherSuitesFilter. | | cipherSuitesFilter - FilterParameters | sslContextParameters/cipherSuitesFilter - FilterParameters | This optional property represents a collection of include and exclude patterns for cipher suites to enable on both the client and server side as well as in the SSLEngine.  The patterns are applied over only the available cipher suites.  The exclude patterns have precedence over the include patterns.  If no ciphersSuites and no cipherSuitesFilter are present, the default patterns applied are: \\ Includes \\ * .\* \\ Excludes \\ * .\*_NULL_.\* * .\*_anon_.\* | | secureSocketProtocols - SecureSocketProtocolsParameters | sslContextParameters/secureSocketProtocols - SecureSocketProtocolsParameters | This optional property represents a collection of explicitly named secure socket protocols, such as SSLv3/TLS/etc., to enable on both the client and server side as well as in the SSLEngine.  These values take precedence over filters supplied in secureSocketProtocolsFilter.  The utility attempts to enable the listed protocols regardless of whether or not the JSSE provider actually supports them or not.  This behavior guarantees that listed protocols aree always enabled when listed.  For a more lenient option, use secureSocketProtocolsFilter. | | secureSocketProtocolsFilter - FilterParameters | sslContextParameters/secureSocketProtocolsFilter - FilterParameters | | | secureSocketProtocolsFilter - FilterParameters | sslContextParameters/secureSocketProtocolsFilter - FilterParameters | This optional property represents a collection of include and exclude patterns for secure socket protocols to enable on both the client and server side as well as in the SSLEngine.  The patterns are applied over only the available protocols.  The exclude patterns have precedence over the include patterns.  If no secureSocketProtocols and no secureSocketProtocolsFilter are present, the default patterns applied are: \\ \\ Includes \\ * .\* | | sessionTimeout - Integer\\ | sslContextParameters/@sessionTimeout - xsd:int | This optional property defines the timeout period, in seconds, for sessions on both the client and server side as well as in the SSLEngine. | | keyManagers - KeyManagersParameters | sslContextParameters/keyManagers - KeyManagersParameters | This optional property configures the source of key material for providing identity of client and server side connections as well as in the SSLEngine.  If omitted, no source of key material is provided and the SSLContext is suitable only for client-side usage when mutual authentication is not in use.  You typically configure this property with a key store containing a client or server private key.\\ | | trustManagers - TrustManagersParameters | sslContextParameters/trustManagers - TrustManagersParameters | This optional property configures the source of material for verifying trust of key material used in the handshake process.  If omitted, the default trust manager is automatically used.  See the [JSSE documentation|http://download.oracle.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html#CustomizingStores] for more information on how the default trust manager is configured.  You typically configure this property with a key store containing trusted CA certificates.\\ | | secureRandom - SecureRandomParameters | sslContextParameters/secureRandom - SecureRandomParameters | This optional property configures the secure random number generator used by the client and server side as well as in the SSLEngine.  If omitted, the default secure random number generator is used.\\ | Integer sessionTimeout; KeyManagersParameters keyManagers;      TrustManagersParameters trustManagers;          SecureRandomParameters secureRandom;   ; SSLContextClientParameters clientParameters; ... Full Content JSSE Utility The JSSE Utility allows you to easily configure aspects of the Java Secure Socket Extension (JSSE) API in order to greatly simplify the use of custom transport layer security (TLS) settings on Camel components. Supported Components The following Camel components directly support the use of this configuration utility: HTTP4 Jetty The following Camel components indirectly support the use of this configuration utility: CXF HTTP Configuration The key component in configuring TLS through the JSSE API is the SSLContext.  The SSLContext provides socket factories for both client-side and server-side sockets as well as another component called an SSLEngine that is used by non-blocking IO to support TLS.  The JSSE configuration utility provides an easy to use builder for configuring these JSSE components, among others, in a manner that allows you to provide all configuration options up front during the initialization of your application such that you don't have to customize library code or dig though the inner workings of a third-party library in order to inject hooks for the configuration of each component in the JSSE API.  The central builder in the JSSE configuration utility is the SSLContextParameters.  This class serves as the entry point for most configuration in the JSSE utility. SSLContextParameters Note: All non-native classes are in the org.apache.camel.util.jsse package and all Spring Namespace elements are in the ????? namespace. Java Field Name and Class Spring Namespace Attribute/Element and Type Description cipherSuites - CipherSuitesParameters sslContextParameters/ciphersuites - CipherSuitesParameters This optional property represents a collection of explicitly named cipher suites to enable on both the client and server side as well as in the SSLEngine.  These values take precedence over filters supplied in cipherSuitesFilter.  The utility attempts to enable the listed cipher suites regardless of whether or not the JSSE provider actually supports them or not.  This behavior guarantees that listed cipher suites are always enabled when listed.  For a more lenient option, use cipherSuitesFilter. cipherSuitesFilter - FilterParameters sslContextParameters/cipherSuitesFilter - FilterParameters This optional property represents a collection of include and exclude patterns for cipher suites to enable on both the client and server side as well as in the SSLEngine.  The patterns are applied over only the available cipher suites.  The exclude patterns have precedence over the include patterns.  If no cipherSuites and no cipherSuitesFilter are present, the default patterns applied are: Includes .* Excludes .*NULL.* .*anon.* secureSocketProtocols - SecureSocketProtocolsParameters sslContextParameters/secureSocketProtocols - SecureSocketProtocolsParameters This optional property represents a collection of explicitly named secure socket protocols, such as SSLv3/TLS/etc., to enable on both the client and server side as well as in the SSLEngine.  These values take precedence over filters supplied in secureSocketProtocolsFilter.  The utility attempts to enable the listed protocols regardless of whether or not the JSSE provider actually supports them or not.  This behavior guarantees that listed protocols aree always enabled when listed.  For a more lenient option, use secureSocketProtocolsFilter. secureSocketProtocolsFilter - FilterParameters sslContextParameters/secureSocketProtocolsFilter - FilterParameters This optional property represents a collection of include and exclude patterns for secure socket protocols to enable on both the client and server side as well as in the SSLEngine.  The patterns are applied over only the available protocols.  The exclude patterns have precedence over the include patterns.  If no secureSocketProtocols and no secureSocketProtocolsFilter are present, the default patterns applied are: Includes .* | sessionTimeout - Integer sslContextParameters/@sessionTimeout - xsd:int This optional property defines the timeout period, in seconds, for sessions on both the client and server side as well as in the SSLEngine. keyManagers - KeyManagersParameters sslContextParameters/keyManagers - KeyManagersParameters This optional property configures the source of key material for providing identity of client and server side connections as well as in the SSLEngine.  If omitted, no source of key material is provided and the SSLContext is suitable only for client-side usage when mutual authentication is not in use.  You typically configure this property with a key store containing a client or server private key. trustManagers - TrustManagersParameters sslContextParameters/trustManagers - TrustManagersParameters This optional property configures the source of material for verifying trust of key material used in the handshake process.  If omitted, the default trust manager is automatically used.  See the JSSE documentation for more information on how the default trust manager is configured.  You typically configure this property with a key store containing trusted CA certificates. secureRandom - SecureRandomParameters sslContextParameters/secureRandom - SecureRandomParameters This optional property configures the secure random number generator used by the client and server side as well as in the SSLEngine.  If omitted, the default secure random number generator is used.                 ; SSLContextClientParameters clientParameters;      SSLContextServerParameters serverParameters; Change Notification Preferences View Online | View Changes | Add Comment