summaryrefslogtreecommitdiffstats
path: root/security-utils
Commit message (Expand)AuthorAgeFilesLines
* Introduce http client that follows Vespa TLS configBjørn Christian Seime2019-02-214-0/+309
* Stop using Bouncycastle for PKCS12 keystoreBjørn Christian Seime2019-02-201-1/+1
* Fix spelling errorsBjørn Christian Seime2019-02-192-2/+2
* Misc changes to TlsContext and its implementationsBjørn Christian Seime2019-02-193-49/+147
* Add withKeyManagerFactory() to specify custom key managerBjørn Christian Seime2019-02-193-59/+37
* Require client auth for ssl engines constructed by DefaultTlsContextBjørn Christian Seime2019-02-191-0/+1
* Add mutable x509 trust managerBjørn Christian Seime2019-02-192-0/+129
* Add x509 key manager that regularly updates cert chain from PEM filesBjørn Christian Seime2019-02-193-0/+239
* Add mutable x509 key managerBjørn Christian Seime2019-02-192-0/+171
* Add utility classes for constructing default x509 trust/key managerBjørn Christian Seime2019-02-192-0/+99
* Revert "Bjorncs/jdisc mixed mode preparations"Arnstein Ressem2019-02-1815-822/+107
* Fix spelling errorsBjørn Christian Seime2019-02-182-2/+2
* Misc changes to TlsContext and its implementationsBjørn Christian Seime2019-02-143-49/+147
* Add withKeyManagerFactory() to specify custom key managerBjørn Christian Seime2019-02-143-59/+37
* Require client auth for ssl engines constructed by DefaultTlsContextBjørn Christian Seime2019-02-141-0/+1
* Add mutable x509 trust managerBjørn Christian Seime2019-02-142-0/+129
* Add x509 key manager that regularly updates cert chain from PEM filesBjørn Christian Seime2019-02-143-0/+239
* Add mutable x509 key managerBjørn Christian Seime2019-02-142-0/+171
* Add utility classes for constructing default x509 trust/key managerBjørn Christian Seime2019-02-142-0/+99
* Fix typoBjørn Christian Seime2019-02-011-1/+1
* Remove throw declaration of unused exceptionBjørn Christian Seime2019-02-011-2/+1
* Restrict enabled protocolsBjørn Christian Seime2019-02-012-1/+21
* Nonfunctional changes onlyJon Bratseth2019-01-312-0/+2
* Use 'prime256v1' curve for EC keysBjørn Christian Seime2019-01-233-7/+18
* Allow configuration of accepted ciphersBjørn Christian Seime2019-01-238-12/+49
* Add TLSv1.3 cipher suites to whitelistBjørn Christian Seime2019-01-231-1/+4
* Fix accidental import of java.sql.DateBjørn Christian Seime2019-01-211-1/+1
* 6-SNAPSHOT -> 7-SNAPSHOT.Arnstein Ressem2019-01-211-2/+2
* Revert "Bratseth/disallow dash "Jon Bratseth2019-01-162-2/+0
* Change access modifier to 'public' for 'fromConfigValue()'Bjørn Christian Seime2019-01-152-2/+2
* Return default values when env vars are not presentBjørn Christian Seime2019-01-151-10/+6
* Define default value for tls authorization modeBjørn Christian Seime2019-01-151-0/+8
* Add 'tls_client_tls_server' as tls mixed mode optionBjørn Christian Seime2019-01-151-1/+9
* Nonfunctional changes onlyJon Bratseth2019-01-102-0/+2
* Store authorization result in TlsCryptoSocketBjørn Christian Seime2019-01-081-0/+9
* Change LOG_ONLY config value from 'log-only' to 'log_only'Bjørn Christian Seime2018-12-101-1/+1
* Fix spelling error ('suits' -> 'suites')Bjørn Christian Seime2018-12-052-8/+8
* Remove whitelisting of AES-CBC ciphersBjørn Christian Seime2018-12-051-5/+1
* Use AuthorizationMode to configure behaviour of PeerAuthorizerTrustManagerBjørn Christian Seime2018-12-056-28/+30
* Add AutorizationModeBjørn Christian Seime2018-12-051-0/+30
* Move MixedMode to separate classBjørn Christian Seime2018-12-052-23/+29
* Split ConfigFileManagedTlsContext into ReloadingTlsContext and DefaultTlsContextBjørn Christian Seime2018-12-053-49/+169
* Specify keystore with certificate chainBjørn Christian Seime2018-12-051-1/+5
* Only allowed whitelisted cipher suitsBjørn Christian Seime2018-12-051-1/+27
* Add TlsContext interface with a implementation based on tls optionsBjørn Christian Seime2018-11-282-0/+105
* Always log warning when authorization failsBjørn Christian Seime2018-11-271-1/+1
* Propagate authz result through ssl handshake session objectBjørn Christian Seime2018-11-271-8/+12
* Add a X509ExtendedTrustManager based on PeerAuthorizerBjørn Christian Seime2018-11-272-0/+151
* Allow specifying trust manager factory in SslContextBuilderBjørn Christian Seime2018-11-271-4/+22
* Add debug logging to PeerAuthorizerBjørn Christian Seime2018-11-271-0/+5