Package org.apache.tika.server.core
Class TlsConfig
java.lang.Object
org.apache.tika.server.core.TlsConfig
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final intDefault warning threshold for certificate expiration (30 days).Default TLS protocols - only TLS 1.2 and 1.3 are enabled by default. -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidCheck certificate expiration dates and log warnings for certificates expiring within the configured threshold.voidintbooleanbooleanisActive()booleanbooleanvoidsetActive(boolean active) voidsetCertExpirationWarningDays(int certExpirationWarningDays) voidsetClientAuthenticationRequired(boolean clientAuthenticationRequired) voidsetClientAuthenticationWanted(boolean clientAuthenticationWanted) voidsetExcludedCipherSuites(List<String> excludedCipherSuites) voidsetExcludedProtocols(List<String> excludedProtocols) voidsetIncludedCipherSuites(List<String> includedCipherSuites) voidsetIncludedProtocols(List<String> includedProtocols) voidsetKeyStoreFile(String keyStoreFile) voidsetKeyStorePassword(String keyStorePassword) voidsetKeyStoreType(String keyStoreType) voidsetTrustStoreFile(String trustStoreFile) voidsetTrustStorePassword(String trustStorePassword) voidsetTrustStoreType(String trustStoreType) toString()
-
Field Details
-
DEFAULT_PROTOCOLS
Default TLS protocols - only TLS 1.2 and 1.3 are enabled by default. TLS 1.0 and 1.1 are considered insecure and should not be used. -
DEFAULT_CERT_EXPIRATION_WARNING_DAYS
public static final int DEFAULT_CERT_EXPIRATION_WARNING_DAYSDefault warning threshold for certificate expiration (30 days).- See Also:
-
-
Constructor Details
-
TlsConfig
public TlsConfig()
-
-
Method Details
-
isActive
public boolean isActive() -
setActive
public void setActive(boolean active) -
getKeyStoreType
-
setKeyStoreType
-
getKeyStorePassword
-
setKeyStorePassword
-
getKeyStoreFile
-
setKeyStoreFile
-
getTrustStoreType
-
setTrustStoreType
-
getTrustStorePassword
-
setTrustStorePassword
-
getTrustStoreFile
-
setTrustStoreFile
-
checkInitialization
- Throws:
TikaConfigException
-
isClientAuthenticationWanted
public boolean isClientAuthenticationWanted() -
setClientAuthenticationWanted
public void setClientAuthenticationWanted(boolean clientAuthenticationWanted) -
isClientAuthenticationRequired
public boolean isClientAuthenticationRequired() -
setClientAuthenticationRequired
public void setClientAuthenticationRequired(boolean clientAuthenticationRequired) -
getIncludedProtocols
-
setIncludedProtocols
-
getExcludedProtocols
-
setExcludedProtocols
-
getIncludedCipherSuites
-
setIncludedCipherSuites
-
getExcludedCipherSuites
-
setExcludedCipherSuites
-
getCertExpirationWarningDays
public int getCertExpirationWarningDays() -
setCertExpirationWarningDays
public void setCertExpirationWarningDays(int certExpirationWarningDays) -
checkCertificateExpiration
public void checkCertificateExpiration()Check certificate expiration dates and log warnings for certificates expiring within the configured threshold.This method should be called after
checkInitialization()to warn about upcoming certificate expirations. -
toString
-
hasTrustStore
public boolean hasTrustStore()
-