Package org.apache.cassandra.security

Class DisableSslContextFactory

java.lang.Object

org.apache.cassandra.security.AbstractSslContextFactory

org.apache.cassandra.security.DisableSslContextFactory

All Implemented Interfaces:

ISslContextFactory

public class DisableSslContextFactory
extends AbstractSslContextFactory

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.cassandra.security.ISslContextFactory

ISslContextFactory.SocketType

Field Summary

Fields inherited from class org.apache.cassandra.security.AbstractSslContextFactory

accepted_protocols, algorithm, cipher_suites, enabled, openSslIsAvailable, optional, parameters, protocol, require_client_auth, require_endpoint_verification, store_type, TLS_PROTOCOL_SUBSTITUTION

Constructor Summary

Constructors

Constructor	Description
DisableSslContextFactory()

Method Summary

Modifier and Type	Method	Description
protected KeyManagerFactory	buildKeyManagerFactory()
protected KeyManagerFactory	buildOutboundKeyManagerFactory()	Create a KeyManagerFactory for outbound connections.
protected TrustManagerFactory	buildTrustManagerFactory()
boolean	hasKeystore()	Returns if this factory uses private keystore.
boolean	hasOutboundKeystore()	Returns if this factory uses outbound keystore.
void	initHotReloading()	Initializes hot reloading of the security keys/certs.
boolean	shouldReload()	Returns if any changes require the reloading of the SSL context returned by this factory.

Methods inherited from class org.apache.cassandra.security.AbstractSslContextFactory

createJSSESslContext, createNettySslContext, deriveIfOpenSslAvailable, getAcceptedProtocols, getBoolean, getBoolean, getCipherSuites, getSslProvider, getString, getString, getStringList

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DisableSslContextFactory

public DisableSslContextFactory()

Method Details

buildKeyManagerFactory

protected KeyManagerFactory buildKeyManagerFactory()
                                            throws SSLException

Specified by:

buildKeyManagerFactory in class AbstractSslContextFactory

Throws:

SSLException

buildTrustManagerFactory

protected TrustManagerFactory buildTrustManagerFactory()
                                                throws SSLException

Specified by:

buildTrustManagerFactory in class AbstractSslContextFactory

Throws:

SSLException

buildOutboundKeyManagerFactory

protected KeyManagerFactory buildOutboundKeyManagerFactory()
                                                    throws SSLException

Description copied from class: AbstractSslContextFactory

Create a KeyManagerFactory for outbound connections. It provides a seperate keystore for internode mTLS outbound connections.

Specified by:

buildOutboundKeyManagerFactory in class AbstractSslContextFactory

Returns:

KeyManagerFactory

Throws:

SSLException

hasKeystore

public boolean hasKeystore()

Description copied from interface: ISslContextFactory

Returns if this factory uses private keystore.

Returns:

true by default unless the implementation overrides this

hasOutboundKeystore

public boolean hasOutboundKeystore()

Description copied from interface: ISslContextFactory

Returns if this factory uses outbound keystore.

Returns:

true by default unless the implementation overrides this

initHotReloading

public void initHotReloading()
                      throws SSLException

Description copied from interface: ISslContextFactory

Initializes hot reloading of the security keys/certs. The implementation must guarantee this to be thread safe.

Throws:

SSLException

shouldReload

public boolean shouldReload()

Description copied from interface: ISslContextFactory

Returns if any changes require the reloading of the SSL context returned by this factory. This will be called by Cassandra's periodic polling for any potential changes that will reload the SSL context. However only newer connections established after the reload will use the reloaded SSL context.

Returns:

true if SSL Context needs to be reload; false otherwise