com.aerospike.client.policy

Class TlsPolicy

java.lang.Object

com.aerospike.client.policy.TlsPolicy

public final class TlsPolicy
extends Object

TLS connection policy. Secure TLS connections are only supported for AerospikeClient synchronous commands.

Field Summary

Fields

Modifier and Type	Field and Description
String[]	ciphers Allowable TLS ciphers that the client can use for secure connections.
boolean	encryptOnly Encrypt data on TLS socket only.
String[]	protocols Allowable TLS protocols that the client can use for secure connections.
BigInteger[]	revokeCertificates Reject certificates whose serial numbers match a serial number in this array.

Constructor Summary

Constructors

Constructor and Description
TlsPolicy()

Method Summary

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

protocols

public String[] protocols

Allowable TLS protocols that the client can use for secure connections. Available cipher names can be obtained by SSLSocket.getSupportedProtocols() Multiple protocols can be specified. Example:

 TlsPolicy policy = new TlsPolicy();
 policy.protocols = new String[] {"TLSv1", "TLSv1.1", "TLSv1.2"};
 
 

Default: TLSv1.2 (Only allow TLSv1.2 protocol)

ciphers

public String[] ciphers

Allowable TLS ciphers that the client can use for secure connections. Available cipher names can be obtained by SSLSocket.getSupportedCipherSuites() Multiple ciphers can be specified. Default: null (Allow default ciphers defined by JVM)

revokeCertificates

public BigInteger[] revokeCertificates

Reject certificates whose serial numbers match a serial number in this array. Default: null (Do not exclude by certificate serial number)

encryptOnly

public boolean encryptOnly

Encrypt data on TLS socket only. Do not authenticate server certificate. If true, an anonymous cipher (like TLS_DH_anon_WITH_AES_128_CBC_SHA256) should be enabled on the client. This anonymous cipher will only work with applications running Java 8+.

The server should also be configured so anonymous ciphers are allowed.

 tls-mode encrypt-only
 tls-cipher-suite aNULL
 

Default: false

Constructor Detail

TlsPolicy

public TlsPolicy()