aboutsummaryrefslogtreecommitdiffstats
path: root/security-utils/src/main/java/com/yahoo/security/tls/ConfigFileBasedTlsContext.java
Commit message (Collapse)AuthorAgeFilesLines
* Update copyrightJon Bratseth2023-10-091-1/+1
|
* Move generic crypto helpers from 'c.y.s.tls' to 'c.y.s'Bjørn Christian Seime2022-07-201-0/+2
|
* Merge Java package 'c.y.s.tls.{auth,json,policy}' into 'c.y.s.tls'Bjørn Christian Seime2022-07-201-1/+0
| | | | Facilitate improved encapsulation of Vespa mTLS related classes
* Always run PeerAutorizerBjørn Christian Seime2022-07-151-5/+2
| | | | | Interpret empty AuthorizedPeers as granting all capabilities unconditionally. Assume AuthorizedPeers as always present.
* Update 2018 copyright notices.gjoranv2021-10-071-1/+1
|
* Remove com.yahoo.vespa.jdk8compatBjørn Christian Seime2021-03-101-4/+7
| | | | These types are often accidentally imported, and the JDK8 replacement is typically a one-liner.
* Make TLS protocol version configurable in TLS config fileBjørn Christian Seime2021-02-241-1/+3
| | | | | Only protocols listed in allowlist can be configured. TLSv1.2 is the only supported version at the moment, but TLSv1.3 will most likely be included in the future.
* Use a single, shared TlsContext instanceBjørn Christian Seime2021-01-141-15/+9
| | | | | The configuration is based on environment variables, which are effectively fixed through the life of the JVM instance. This simplifaction removes the need for complex cleanup logic based on manual reference counting and weak references.
* Revert "Use a single reloader per tls config file, and not one per instance."Bjørn Christian Seime2021-01-141-23/+135
| | | | This reverts commit c58415566e23dcac5f0daa352f39f567a4d7b44f.
* Revert "Use reference counting to avoid relying on GC to drop threads."Bjørn Christian Seime2021-01-141-19/+6
| | | | This reverts commit 1c6c89eb52ac80c583c0cd90efdd0784344af434.
* Use reference counting to avoid relying on GC to drop threads.Henning Baldersheim2020-04-231-6/+19
|
* Use a single reloader per tls config file, and not one per instance.Henning Baldersheim2020-04-231-135/+23
|
* Override hostname verification in PeerAuthorizerTrustManagerBjørn Christian Seime2020-02-171-3/+3
| | | | | Override hostname verification on client-side. Remove overriding of hostname verification for server-side.
* Use 'withTrustManager' in ConfigFileBasedTlsContextBjørn Christian Seime2020-02-171-5/+5
|
* Use JDK8 as build target for security-utilsBjørn Christian Seime2019-12-021-4/+4
|
* Add additional constructor for custom peer authentication modeBjørn Christian Seime2019-09-131-3/+12
|
* Fix typo in class nameBjørn Christian Seime2019-07-041-0/+185