All Packages  Class Hierarchy  This Package  Previous  Next  Index

Class javax.net.ssl.SSLServerSocket

java.lang.Object
   |
   +----java.net.ServerSocket
           |
           +----javax.net.ssl.SSLServerSocket

public abstract class SSLServerSocket

extends ServerSocket

See Also:

ServerSocket, SSLSocket

SSLServerSocket(int)

Used only by subclasses.

SSLServerSocket(int, int)

Used only by subclasses.

SSLServerSocket(int, int, InetAddress)

Used only by subclasses.

getEnabledCipherSuites()

Returns the list of cipher suites which are currently enabled for use by newly accepted connections.

getEnableSessionCreation()

Returns true if new SSL sessions may be established by the sockets which are created from this server socket.

getNeedClientAuth()

Returns true if client authentication is required on newly accepted connections.

getSupportedCipherSuites()

Returns the names of the cipher suites which could be enabled for use on an SSL connection.

getUseClientMode()

Returns true if accepted connections will be in SSL client mode.

setEnabledCipherSuites(String[])

Controls which particular SSL cipher suites are enabled for use by accepted connections.

setEnableSessionCreation(boolean)

Controls whether new SSL sessions may be established by the sockets which are created from this server socket.

setNeedClientAuth(boolean)

Controls whether the connections which are accepted must include client authentication.

setUseClientMode(boolean)

Controls whether accepted connections are in the (default) SSL server mode, or the SSL client mode.

 protected SSLServerSocket(int port) throws IOException

Used only by subclasses. Create a TCP server socket on a port, using the default authentication context. The connection backlog defaults to fifty connections queued up before the system starts to reject new connection requests.

Parameters:

port - the port on which to listen

 protected SSLServerSocket(int port,
                           int backlog) throws IOException

Used only by subclasses. Create a TCP server socket on a port, using the default authentication context and a specified backlog of connections.

Parameters:

port - the port on which to listen

backlog - how many connections may be pending before the system should start rejecting new requests

 protected SSLServerSocket(int port,
                           int backlog,
                           InetAddress address) throws IOException

Used only by subclasses. Create a TCP server socket on a port, using the default authentication context and a specified backlog of connections as well as a particular specified network interface. This constructor is used on multihomed hosts, such as those used for firewalls or as routers, to control through which interface a network service is provided.

Parameters:

port - the port on which to listen

backlog - how many connections may be pending before the system should start rejecting new requests

address - the address of the network interface through which connections will be accepted

 public abstract String[] getEnabledCipherSuites()

Returns the list of cipher suites which are currently enabled for use by newly accepted connections. If this has not been explicitly modified, a system-provided default guarantees a minimum quality of service in all enabled cipher suites. That default is accessible through the SSLSocket API.

There are several reasons why an enabled cipher suite might not actually be used. For example: the server socket might not have appropriate private keys available to it or the cipher suite might be anonymous, precluding the use of client authentication, while the server socket has been told to require that sort of authentication.

See Also:

getSupportedCipherSuites, setEnabledCipherSuites

 public abstract void setEnabledCipherSuites(String suites[])

Controls which particular SSL cipher suites are enabled for use by accepted connections. The cipher suites must have been listed by getSupportedCipherSuites() as being supported. Suites which require authentication information which is not available in this ServerSocket's authentication context will not be used in any case, even if they are enabled.

Parameters:

suites - Names of all the cipher suites to enable; null means to accept system defaults.

See Also:

getSupportedCipherSuites, getEnabledCipherSuites

 public abstract String[] getSupportedCipherSuites()

Returns the names of the cipher suites which could be enabled for use on an SSL connection. Normally, only a subset of these will actually be enabled by default, since this list may include cipher suites which do not meet quality of service requirements for those defaults. Such cipher suites are useful in specialized applications.

Returns:

an array of cipher suite names

See Also:

getEnabledCipherSuites, setEnabledCipherSuites

 public abstract void setNeedClientAuth(boolean flag)

Controls whether the connections which are accepted must include client authentication. By default, clients do not need to provide authentication information. This control requires the connection to be in the (default) SSL server mode.

Parameters:

flag - true if the clients must authenticate themselves.

 public abstract boolean getNeedClientAuth()

Returns true if client authentication is required on newly accepted connections.

Returns:

true if the clients must authenticate themselves.

See Also:

setNeedClientAuth

 public abstract void setUseClientMode(boolean flag)

Controls whether accepted connections are in the (default) SSL server mode, or the SSL client mode. In rare cases, TCP servers need to act in the SSL client mode on newly accepted connections in order to reuse sessions. For example, FTP clients acquire server sockets and listen there for reverse connections, from the server. FTP clients would use SSLServerSockets in "client" mode, in order to reuse existing SSL sessions where the FTP client is acting as a client.

Parameters:

flag - true if newly accepted connections should use SSL client mode.

 public abstract boolean getUseClientMode()

Returns true if accepted connections will be in SSL client mode.

Returns:

true if the connection should use SSL client mode.

See Also:

setUseClientMode

 public abstract void setEnableSessionCreation(boolean flag)

Controls whether new SSL sessions may be established by the sockets which are created from this server socket.

Parameters:

flag - true indicates that sessions may be created; this is the default. false indicates that an existing session must be resumed.

 public abstract boolean getEnableSessionCreation()

Returns true if new SSL sessions may be established by the sockets which are created from this server socket.

Returns:

true indicates that sessions may be created; this is the default. false indicates that an existing session must be resumed.

All Packages  Class Hierarchy  This Package  Previous  Next  Index