org.openeuler.tomcat

类 GMJSSEImplementation

java.lang.Object

org.apache.tomcat.util.net.SSLImplementation

org.apache.tomcat.util.net.jsse.JSSEImplementation

org.openeuler.tomcat.GMJSSEImplementation

public class GMJSSEImplementation
extends org.apache.tomcat.util.net.jsse.JSSEImplementation

JSSEImplementation support GMTLS

嵌套类概要

嵌套类

限定符和类型	类和说明
(专用程序包) static class	GMJSSEImplementation.GMCipher
(专用程序包) static class	GMJSSEImplementation.GMCipherGroup

字段概要

字段

限定符和类型	字段和说明
private static Map<String,List<String>>	ALIAS_MAP
private static String	ALL
private static String	DELETE If - is used then the ciphers are deleted from the list, but some or all of the ciphers can be added again by later options.
private static String	EXCLUDE If !
private Set<String>	explicitlyRequestedProtocols
private static Set<String>	GM_CIPHERS_NAME_SET
private static String	GM_PROTOCOL
private static String	gmtlsProviders
private static String	HIGH
private static org.apache.juli.logging.Log	log
private static String	SEPARATOR

构造器概要

构造器

构造器和说明
GMJSSEImplementation()

方法概要

限定符和类型	方法和说明
private Set<String>	getExplicitlyRequestedProtocol(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig)
org.apache.tomcat.util.net.SSLUtil	getSSLUtil(org.apache.tomcat.util.net.SSLHostConfigCertificate certificate)
private static void	initGMCiphersNameSetAndAliasMap()
private void	initGMCipherSuites(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig) Init GM cipher suites
private void	initGMProtocol(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig) init GM protocol
private static void	initProvider()
private boolean	needAddGMProtocol(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig) If explicitlyRequestedProtocol is empty, it means that SSLHostConfig does not set the protocols property or the Connector does not set the sslEnabledProtocols property explicitly.
private void	parseCipher(String element, Set<String> gmCiphers, Set<String> removedCiphers) Parse cipher expression, refer to OpenSSLCipherConfigurationParser#parse.
private Set<String>	parseCiphers(String expression) Parse cipher expression

从类继承的方法 org.apache.tomcat.util.net.jsse.JSSEImplementation

getSSLSupport, getSSLSupport, isAlpnSupported

从类继承的方法 org.apache.tomcat.util.net.SSLImplementation

getInstance

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

log

private static final org.apache.juli.logging.Log log

GM_PROTOCOL

private static final String GM_PROTOCOL

另请参阅:

常量字段值

SEPARATOR

private static final String SEPARATOR

另请参阅:

常量字段值

HIGH

private static final String HIGH

另请参阅:

常量字段值

EXCLUDE

private static final String EXCLUDE

If ! is used then the ciphers are permanently deleted from the list. The ciphers deleted can never reappear in the list, even if they are explicitly stated.

另请参阅:

常量字段值

DELETE

private static final String DELETE

If - is used then the ciphers are deleted from the list, but some or all of the ciphers can be added again by later options.

另请参阅:

常量字段值

ALL

private static final String ALL

另请参阅:

常量字段值

GM_CIPHERS_NAME_SET

private static final Set<String> GM_CIPHERS_NAME_SET

ALIAS_MAP

private static final Map<String,List<String>> ALIAS_MAP

gmtlsProviders

private static final String gmtlsProviders

explicitlyRequestedProtocols

private Set<String> explicitlyRequestedProtocols

构造器详细资料

GMJSSEImplementation

public GMJSSEImplementation()

方法详细资料

initProvider

private static void initProvider()

initGMCiphersNameSetAndAliasMap

private static void initGMCiphersNameSetAndAliasMap()

getSSLUtil

public org.apache.tomcat.util.net.SSLUtil getSSLUtil(org.apache.tomcat.util.net.SSLHostConfigCertificate certificate)

覆盖:

getSSLUtil 在类中 org.apache.tomcat.util.net.jsse.JSSEImplementation

initGMProtocol

private void initGMProtocol(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig)

init GM protocol

getExplicitlyRequestedProtocol

private Set<String> getExplicitlyRequestedProtocol(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig)

needAddGMProtocol

private boolean needAddGMProtocol(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig)

If explicitlyRequestedProtocol is empty, it means that SSLHostConfig does not set the protocols property or the Connector does not set the sslEnabledProtocols property explicitly.

The SSLHostConfig#protocols are set to SSLHostConfig#SSL_PROTO_ALL_SET and SSLHostConfig#SSL_PROTO_ALL_SET does not contain GMTLS, we need to add GMTLS protocol.

initGMCipherSuites

private void initGMCipherSuites(org.apache.tomcat.util.net.SSLHostConfig sslHostConfig)

Init GM cipher suites

parseCiphers

private Set<String> parseCiphers(String expression)

Parse cipher expression

parseCipher

private void parseCipher(String element,
                         Set<String> gmCiphers,
                         Set<String> removedCiphers)

Parse cipher expression, refer to OpenSSLCipherConfigurationParser#parse. Only support DELETE and EXCLUDE now , TO_END and END are not supported. For example :

ECC_SM4_CBC_SM3 ALL:-ECC_SM4_CBC_SM3 ALL:!ECC_SM4_CBC_SM3 GM_ECC:GM_ECDH ALL:!GM_ECC ALL:!GM_ECDHE

另请参阅:

org.apache.tomcat.util.net.openssl.ciphers.OpenSSLCipherConfigurationParser#parse(String)