public class org.apache.kafkaesqueesque.common.config.SslConfigs extends java.lang.Object
{
public static final java.lang.String PRINCIPAL_BUILDER_CLASS_CONFIG;
public static final java.lang.String PRINCIPAL_BUILDER_CLASS_DOC;
public static final java.lang.String DEFAULT_PRINCIPAL_BUILDER_CLASS;
public static final java.lang.String SSL_PROTOCOL_CONFIG;
public static final java.lang.String SSL_PROTOCOL_DOC;
public static final java.lang.String DEFAULT_SSL_PROTOCOL;
public static final java.lang.String SSL_PROVIDER_CONFIG;
public static final java.lang.String SSL_PROVIDER_DOC;
public static final java.lang.String SSL_CIPHER_SUITES_CONFIG;
public static final java.lang.String SSL_CIPHER_SUITES_DOC;
public static final java.lang.String SSL_ENABLED_PROTOCOLS_CONFIG;
public static final java.lang.String SSL_ENABLED_PROTOCOLS_DOC;
public static final java.lang.String DEFAULT_SSL_ENABLED_PROTOCOLS;
public static final java.lang.String SSL_KEYSTORE_TYPE_CONFIG;
public static final java.lang.String SSL_KEYSTORE_TYPE_DOC;
public static final java.lang.String DEFAULT_SSL_KEYSTORE_TYPE;
public static final java.lang.String SSL_KEYSTORE_LOCATION_CONFIG;
public static final java.lang.String SSL_KEYSTORE_LOCATION_DOC;
public static final java.lang.String SSL_KEYSTORE_PASSWORD_CONFIG;
public static final java.lang.String SSL_KEYSTORE_PASSWORD_DOC;
public static final java.lang.String SSL_KEY_PASSWORD_CONFIG;
public static final java.lang.String SSL_KEY_PASSWORD_DOC;
public static final java.lang.String SSL_TRUSTSTORE_TYPE_CONFIG;
public static final java.lang.String SSL_TRUSTSTORE_TYPE_DOC;
public static final java.lang.String DEFAULT_SSL_TRUSTSTORE_TYPE;
public static final java.lang.String SSL_TRUSTSTORE_LOCATION_CONFIG;
public static final java.lang.String SSL_TRUSTSTORE_LOCATION_DOC;
public static final java.lang.String SSL_TRUSTSTORE_PASSWORD_CONFIG;
public static final java.lang.String SSL_TRUSTSTORE_PASSWORD_DOC;
public static final java.lang.String SSL_KEYMANAGER_ALGORITHM_CONFIG;
public static final java.lang.String SSL_KEYMANAGER_ALGORITHM_DOC;
public static final java.lang.String DEFAULT_SSL_KEYMANGER_ALGORITHM;
public static final java.lang.String SSL_TRUSTMANAGER_ALGORITHM_CONFIG;
public static final java.lang.String SSL_TRUSTMANAGER_ALGORITHM_DOC;
public static final java.lang.String DEFAULT_SSL_TRUSTMANAGER_ALGORITHM;
public static final java.lang.String SSL_ENDPOINT_IDENTIFICATION_ALGORITHM_CONFIG;
public static final java.lang.String SSL_ENDPOINT_IDENTIFICATION_ALGORITHM_DOC;
public static final java.lang.String DEFAULT_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM;
public static final java.lang.String SSL_SECURE_RANDOM_IMPLEMENTATION_CONFIG;
public static final java.lang.String SSL_SECURE_RANDOM_IMPLEMENTATION_DOC;
public static final java.lang.String SSL_CLIENT_AUTH_CONFIG;
public static final java.lang.String SSL_CLIENT_AUTH_DOC;
public static final java.util.Set RECONFIGURABLE_CONFIGS;
public static final java.util.Set NON_RECONFIGURABLE_CONFIGS;
public void <init>()
{
org.apache.kafkaesqueesque.common.config.SslConfigs v;
v := @this: org.apache.kafkaesqueesque.common.config.SslConfigs;
specialinvoke v.<java.lang.Object: void <init>()>();
return;
}
public static void addClientSslSupport(org.apache.kafkaesqueesque.common.config.ConfigDef)
{
org.apache.kafkaesqueesque.common.config.ConfigDef$Importance v, v, v, v, v, v, v, v, v, v, v, v, v, v, v;
org.apache.kafkaesqueesque.common.config.ConfigDef$Type v, v, v, v, v, v, v, v, v, v, v, v, v, v, v;
org.apache.kafkaesqueesque.common.config.ConfigDef v, v, v, v, v, v, v, v, v, v, v, v, v, v, v;
java.lang.String v, v;
v := @parameter: org.apache.kafkaesqueesque.common.config.ConfigDef;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance MEDIUM>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.protocol", v, "TLSv.2", v, "The SSL protocol used to generate the SSLContext. Default setting is TLSv.2, which is fine for most cases. Allowed values in recent JVMs are TLSv.2 and TLSv.3. TLS, TLSv.1, SSL, SSLv and SSLv may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance MEDIUM>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.provider", v, null, v, "The name of the security provider used for SSL connections. Default value is the default security provider of the JVM.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type LIST>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance LOW>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.cipher.suites", v, null, v, "A list of cipher suites. This is a named combination of authentication, encryption, MAC and key exchange algorithm used to negotiate the security settings for a network connection using TLS or SSL network protocol. By default all the available cipher suites are supported.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type LIST>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance MEDIUM>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.enabled.protocols", v, "TLSv.2", v, "The list of protocols enabled for SSL connections.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance MEDIUM>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.keystore.type", v, "JKS", v, "The file format of the key store file. This is optional for client.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance HIGH>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.keystore.location", v, null, v, "The location of the key store file. This is optional for client and can be used for two-way authentication for client.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type PASSWORD>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance HIGH>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.keystore.password", v, null, v, "The store password for the key store file. This is optional for client and only needed if ssl.keystore.location is configured. ");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type PASSWORD>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance HIGH>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.key.password", v, null, v, "The password of the private key in the key store file. This is optional for client.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance MEDIUM>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.truststore.type", v, "JKS", v, "The file format of the trust store file.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance HIGH>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.truststore.location", v, null, v, "The location of the trust store file. ");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type PASSWORD>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance HIGH>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.truststore.password", v, null, v, "The password for the trust store file. If a password is not set access to the truststore is still available, but integrity checking is disabled.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.SslConfigs: java.lang.String DEFAULT_SSL_KEYMANGER_ALGORITHM>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance LOW>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.keymanager.algorithm", v, v, v, "The algorithm used by key manager factory for SSL connections. Default value is the key manager factory algorithm configured for the Java Virtual Machine.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.SslConfigs: java.lang.String DEFAULT_SSL_TRUSTMANAGER_ALGORITHM>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance LOW>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.trustmanager.algorithm", v, v, v, "The algorithm used by trust manager factory for SSL connections. Default value is the trust manager factory algorithm configured for the Java Virtual Machine.");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance LOW>;
v = virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.endpoint.identification.algorithm", v, "https", v, "The endpoint identification algorithm to validate server hostname using server certificate. ");
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Type: org.apache.kafkaesqueesque.common.config.ConfigDef$Type STRING>;
v = <org.apache.kafkaesqueesque.common.config.ConfigDef$Importance: org.apache.kafkaesqueesque.common.config.ConfigDef$Importance LOW>;
virtualinvoke v.<org.apache.kafkaesqueesque.common.config.ConfigDef: org.apache.kafkaesqueesque.common.config.ConfigDef define(java.lang.String,org.apache.kafkaesqueesque.common.config.ConfigDef$Type,java.lang.Object,org.apache.kafkaesqueesque.common.config.ConfigDef$Importance,java.lang.String)>("ssl.secure.random.implementation", v, null, v, "The SecureRandom PRNG implementation to use for SSL cryptography operations. ");
return;
}
static void <clinit>()
{
java.util.Set v, v;
java.lang.String[] v, v;
java.lang.Class v;
java.lang.String v, v, v;
v = class "Lorg/apache/kafkaesqueesque/common/security/auth/DefaultPrincipalBuilder;";
v = virtualinvoke v.<java.lang.Class: java.lang.String getName()>();
<org.apache.kafkaesqueesque.common.config.SslConfigs: java.lang.String DEFAULT_PRINCIPAL_BUILDER_CLASS> = v;
v = staticinvoke <javax.net.ssl.KeyManagerFactory: java.lang.String getDefaultAlgorithm()>();
<org.apache.kafkaesqueesque.common.config.SslConfigs: java.lang.String DEFAULT_SSL_KEYMANGER_ALGORITHM> = v;
v = staticinvoke <javax.net.ssl.TrustManagerFactory: java.lang.String getDefaultAlgorithm()>();
<org.apache.kafkaesqueesque.common.config.SslConfigs: java.lang.String DEFAULT_SSL_TRUSTMANAGER_ALGORITHM> = v;
v = newarray (java.lang.String)[7];
v[0] = "ssl.keystore.type";
v[1] = "ssl.keystore.location";
v[2] = "ssl.keystore.password";
v[3] = "ssl.key.password";
v[4] = "ssl.truststore.type";
v[5] = "ssl.truststore.location";
v[6] = "ssl.truststore.password";
v = staticinvoke <org.apache.kafkaesqueesque.common.utils.Utils: java.util.Set mkSet(java.lang.Object[])>(v);
<org.apache.kafkaesqueesque.common.config.SslConfigs: java.util.Set RECONFIGURABLE_CONFIGS> = v;
v = newarray (java.lang.String)[9];
v[0] = "ssl.client.auth";
v[1] = "ssl.protocol";
v[2] = "ssl.provider";
v[3] = "ssl.cipher.suites";
v[4] = "ssl.enabled.protocols";
v[5] = "ssl.keymanager.algorithm";
v[6] = "ssl.trustmanager.algorithm";
v[7] = "ssl.endpoint.identification.algorithm";
v[8] = "ssl.secure.random.implementation";
v = staticinvoke <org.apache.kafkaesqueesque.common.utils.Utils: java.util.Set mkSet(java.lang.Object[])>(v);
<org.apache.kafkaesqueesque.common.config.SslConfigs: java.util.Set NON_RECONFIGURABLE_CONFIGS> = v;
return;
}
}