Package org.wildfly.security.ssl
Class CipherSuitePredicate
java.lang.Object
org.wildfly.security.ssl.CipherSuitePredicate
An opaque predicate which can be used to match SSL/TLS cipher suites.
- Author:
- David M. Lloyd
-
Method Summary
Modifier and TypeMethodDescriptionstatic CipherSuitePredicatematchAll(CipherSuitePredicate... predicates) Match all of the given predicates.static CipherSuitePredicateMatch all anonymous ciphers which use Diffie-Hellman key exchange.static CipherSuitePredicatematchAny(CipherSuitePredicate... predicates) Match any of the given predicates.static CipherSuitePredicatematchAuthentication(EnumSet<Authentication> authentications) Return a predicate which matches any of the given authentication schemes.static CipherSuitePredicatematchAuthentication(Authentication authentication) Return a predicate which matches the given authentication scheme.static CipherSuitePredicatematchAuthentication(Authentication... authentications) Return a predicate which matches any of the given authentication schemes.static CipherSuitePredicateReturn a predicate which matches all cipher suites that would be fully deleted in the default selector configuration.static CipherSuitePredicatematchDigest(EnumSet<Digest> digests) Return a predicate which matches any of the given digest schemes.static CipherSuitePredicatematchDigest(Digest digest) Return a predicate which matches the given digest scheme.static CipherSuitePredicatematchDigest(Digest... digests) Return a predicate which matches any of the given digest schemes.static CipherSuitePredicatematchEncryption(EnumSet<Encryption> encryptions) Return a predicate which matches any of the given encryption schemes.static CipherSuitePredicatematchEncryption(Encryption encryption) Return a predicate which matches the given encryption scheme.static CipherSuitePredicatematchEncryption(Encryption... encryptions) Return a predicate which matches any of the given encryption schemes.static CipherSuitePredicateReturn a predicate which matches all exportable cipher suites.static CipherSuitePredicateMatch no possible cipher suites.static CipherSuitePredicateReturn a predicate which matches all FIPS cipher suites.static CipherSuitePredicatematchKeyAgreement(KeyAgreement keyAgreement) Return a predicate which matches the given key exchange scheme.static CipherSuitePredicatematchKeyExchange(EnumSet<KeyAgreement> keyAgreements) Return a predicate which matches any of the given key exchange schemes.static CipherSuitePredicatematchKeyExchange(KeyAgreement... keyAgreements) Return a predicate which matches any of the given key exchange schemes.static CipherSuitePredicatematchLevel(EnumSet<SecurityLevel> levels) Return a predicate which matches any of the given security levels.static CipherSuitePredicatematchLevel(SecurityLevel level) Return a predicate which matches the given security level.static CipherSuitePredicatematchLevel(SecurityLevel... levels) Return a predicate which matches any of the given security levels.static CipherSuitePredicatematchLevelLessThan(SecurityLevel level) Return a predicate which matches all security levels less than the given level.static CipherSuitePredicateReturn a predicate which matches a cipher suite with the given name.static CipherSuitePredicateReturn a predicate which matches all non-exportable cipher suites.static CipherSuitePredicateReturn a predicate which matches all non-FIPS cipher suites.static CipherSuitePredicatematchNot(CipherSuitePredicate predicate) Invert the given predicate.static CipherSuitePredicateMatch all cipher suites except for anonymous and encryptionless suites, which must be explicitly enabled.static CipherSuitePredicateMatch all cipher suites included bymatchOpenSslAll()but are disabled by default (generally, anonymous Diffie-Hellman suites including elliptic curve suites).static CipherSuitePredicateMatch all of the cipher suites which are added by OpenSSL when using the specialCOMPLEMENTOFDEFAULTrule.static CipherSuitePredicateMatch all of the cipher suites which are automatically deleted by OpenSSL when using the specialDEFAULTrule.static CipherSuitePredicatematchProtocol(EnumSet<Protocol> protocols) Return a predicate which matches any of the given protocols.static CipherSuitePredicatematchProtocol(Protocol protocol) Return a predicate which matches the given protocol.static CipherSuitePredicatematchProtocol(Protocol... protocols) Return a predicate which matches any of the given protocols.static CipherSuitePredicateMatch all possible cipher suites.final StringtoString()Get the string representation of this predicate.
-
Method Details
-
matchTrue
Match all possible cipher suites.- Returns:
- the
truepredicate
-
matchFalse
Match no possible cipher suites.- Returns:
- the
falsepredicate
-
matchAll
Match all of the given predicates.- Parameters:
predicates- the predicates- Returns:
- a predicate that is
truewhen all nested predicates aretrue
-
matchAny
Match any of the given predicates.- Parameters:
predicates- the predicates- Returns:
- a predicate that is
truewhen any nested predicate istrue
-
matchNot
Invert the given predicate.- Parameters:
predicate- the predicate- Returns:
- a predicate which is
truewhen the nested predicate isfalse, and vice-versa
-
matchEncryption
Return a predicate which matches the given encryption scheme.- Parameters:
encryption- the encryption scheme- Returns:
- the predicate
-
matchEncryption
Return a predicate which matches any of the given encryption schemes.- Parameters:
encryptions- the encryption schemes- Returns:
- the predicate
-
matchEncryption
Return a predicate which matches any of the given encryption schemes.- Parameters:
encryptions- the encryption schemes- Returns:
- the predicate
-
matchAuthentication
Return a predicate which matches the given authentication scheme.- Parameters:
authentication- the authentication scheme- Returns:
- the predicate
-
matchAuthentication
Return a predicate which matches any of the given authentication schemes.- Parameters:
authentications- the authentication schemes- Returns:
- the predicate
-
matchAuthentication
Return a predicate which matches any of the given authentication schemes.- Parameters:
authentications- the authentication schemes- Returns:
- the predicate
-
matchKeyAgreement
Return a predicate which matches the given key exchange scheme.- Parameters:
keyAgreement- the key exchange scheme- Returns:
- the predicate
-
matchKeyExchange
Return a predicate which matches any of the given key exchange schemes.- Parameters:
keyAgreements- the key exchange schemes- Returns:
- the predicate
-
matchKeyExchange
Return a predicate which matches any of the given key exchange schemes.- Parameters:
keyAgreements- the key exchange schemes- Returns:
- the predicate
-
matchDigest
Return a predicate which matches the given digest scheme.- Parameters:
digest- the digest scheme- Returns:
- the predicate
-
matchDigest
Return a predicate which matches any of the given digest schemes.- Parameters:
digests- the digest schemes- Returns:
- the predicate
-
matchDigest
Return a predicate which matches any of the given digest schemes.- Parameters:
digests- the digest schemes- Returns:
- the predicate
-
matchProtocol
Return a predicate which matches the given protocol.- Parameters:
protocol- the protocol- Returns:
- the predicate
-
matchProtocol
Return a predicate which matches any of the given protocols.- Parameters:
protocols- the protocols- Returns:
- the predicate
-
matchProtocol
Return a predicate which matches any of the given protocols.- Parameters:
protocols- the protocols- Returns:
- the predicate
-
matchLevel
Return a predicate which matches the given security level.- Parameters:
level- the security level- Returns:
- the predicate
-
matchLevel
Return a predicate which matches any of the given security levels.- Parameters:
levels- the security levels- Returns:
- the predicate
-
matchLevel
Return a predicate which matches any of the given security levels.- Parameters:
levels- the security levels- Returns:
- the predicate
-
matchLevelLessThan
Return a predicate which matches all security levels less than the given level.- Parameters:
level- the security level to compare against- Returns:
- the predicate
-
matchFips
Return a predicate which matches all FIPS cipher suites.- Returns:
- the predicate
-
matchNonFips
Return a predicate which matches all non-FIPS cipher suites.- Returns:
- the predicate
-
matchExport
Return a predicate which matches all exportable cipher suites.- Returns:
- the predicate
-
matchNonExport
Return a predicate which matches all non-exportable cipher suites.- Returns:
- the predicate
-
matchName
Return a predicate which matches a cipher suite with the given name. The cipher suite name must be a standard or OpenSSL-style mechanism name identifying a single mechanism.- Returns:
- the predicate
-
matchDefaultDeletes
Return a predicate which matches all cipher suites that would be fully deleted in the default selector configuration.- Returns:
- the predicate
-
matchAnonDH
Match all anonymous ciphers which use Diffie-Hellman key exchange.- Returns:
- the predicate
-
matchOpenSslAll
Match all cipher suites except for anonymous and encryptionless suites, which must be explicitly enabled.- Returns:
- the predicate
-
matchOpenSslComplementOfAll
Match all cipher suites included bymatchOpenSslAll()but are disabled by default (generally, anonymous Diffie-Hellman suites including elliptic curve suites).- Returns:
- the predicate
-
matchOpenSslDefaultDeletes
Match all of the cipher suites which are automatically deleted by OpenSSL when using the specialDEFAULTrule.- Returns:
- the predicate
-
matchOpenSslComplementOfDefault
Match all of the cipher suites which are added by OpenSSL when using the specialCOMPLEMENTOFDEFAULTrule.- Returns:
- the predicate
-
toString
Get the string representation of this predicate.
-