Misc changes to TlsContext and its implementations

- Add methods to retrieve underlying SSLContext and SSLParameters
- Add createSslEngine() overload with peer host and port
- Remove constructor DefaultTlsContext constructor taking path to config file.
- Resolve valid ciphers and protcols in constructor.
- Use mutual x509 key/trust manager in ReloadingTlsContext

1 files changed, 7 insertions, 0 deletions

diff --git a/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java b/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java
index 58687a0ba8f..b315dd00b31 100644
--- a/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java
+++ b/security-utils/src/main/java/com/yahoo/security/tls/TlsContext.java
@@ -3,6 +3,7 @@ package com.yahoo.security.tls;
 
 import javax.net.ssl.SSLContext;
 import javax.net.ssl.SSLEngine;
+import javax.net.ssl.SSLParameters;
 
 /**
  * A simplified version of {@link SSLContext} modelled as an interface.
@@ -11,8 +12,14 @@ import javax.net.ssl.SSLEngine;
  */
 public interface TlsContext extends AutoCloseable {
 
+    SSLContext context();
+
+    SSLParameters parameters();
+
     SSLEngine createSslEngine();
 
+    SSLEngine createSslEngine(String peerHost, int peerPort);
+
     @Override default void close() {}
 
 }