io.netty.handler.ssl.OpenSsl.isAlpnSupported()方法的使用及代码示例

x33g5p2x  于2022-01-25 转载在 其他  
字(12.3k)|赞(0)|评价(0)|浏览(300)

本文整理了Java中io.netty.handler.ssl.OpenSsl.isAlpnSupported()方法的一些代码示例，展示了OpenSsl.isAlpnSupported()的具体用法。这些代码示例主要来源于Github/Stackoverflow/Maven等平台，是从一些精选项目中提取出来的代码，具有较强的参考意义，能在一定程度帮忙到你。OpenSsl.isAlpnSupported()方法的具体详情如下：
包路径：io.netty.handler.ssl.OpenSsl
类名称：OpenSsl
方法名：isAlpnSupported

OpenSsl.isAlpnSupported介绍

[英]Returns true if the used version of openssl supports ALPN.
[中]如果使用的openssl版本支持ALPN，则返回true。

代码示例

代码示例来源：origin: eclipse-vertx/vert.x

/**
 * @return when alpn support is available via OpenSSL engine
 */
public static boolean isAlpnAvailable() {
 return OpenSsl.isAlpnSupported();
}

代码示例来源：origin: Netflix/zuul

public static SslProvider chooseSslProvider() {
  // Use openssl only if available and has ALPN support (ie. version > 1.0.2).
  SslProvider sslProvider;
  if (ALLOW_USE_OPENSSL.get() && OpenSsl.isAvailable() && OpenSsl.isAlpnSupported()) {
    sslProvider = SslProvider.OPENSSL;
  }
  else {
    sslProvider = SslProvider.JDK;
  }
  return sslProvider;
}

代码示例来源：origin: googleapis/google-cloud-java

boolean openSslAlpnIsSupported = OpenSsl.isAlpnSupported();
String javaVersion = Runtime.class.getPackage().getImplementationVersion();
String javaSpecificationVersion = System.getProperty("java.specification.version");

代码示例来源：origin: Netflix/zuul

public static SslProvider chooseSslProvider() {
  // Use openssl only if available and has ALPN support (ie. version > 1.0.2).
  SslProvider sslProvider;
  if (ALLOW_USE_OPENSSL.get() && OpenSsl.isAvailable() && OpenSsl.isAlpnSupported()) {
    sslProvider = SslProvider.OPENSSL;
  }
  else {
    sslProvider = SslProvider.JDK;
  }
  return sslProvider;
}

代码示例来源：origin: jooby-project/jooby

static SslContext build(final Config conf) throws IOException, CertificateException {
 String tmpdir = conf.getString("application.tmpdir");
 boolean http2 = conf.getBoolean("server.http2.enabled");
 File keyStoreCert = toFile(conf.getString("ssl.keystore.cert"), tmpdir);
 File keyStoreKey = toFile(conf.getString("ssl.keystore.key"), tmpdir);
 String keyStorePass = conf.hasPath("ssl.keystore.password")
   ? conf.getString("ssl.keystore.password") : null;
 SslContextBuilder scb = SslContextBuilder.forServer(keyStoreCert, keyStoreKey, keyStorePass);
 if (conf.hasPath("ssl.trust.cert")) {
  scb.trustManager(toFile(conf.getString("ssl.trust.cert"), tmpdir))
    .clientAuth(ClientAuth.REQUIRE);
 }
 if (http2) {
  SslProvider provider = OpenSsl.isAlpnSupported() ? SslProvider.OPENSSL : SslProvider.JDK;
  return scb.sslProvider(provider)
    .ciphers(Http2SecurityUtil.CIPHERS, SupportedCipherSuiteFilter.INSTANCE)
    .applicationProtocolConfig(new ApplicationProtocolConfig(
      Protocol.ALPN,
      SelectorFailureBehavior.NO_ADVERTISE,
      SelectedListenerFailureBehavior.ACCEPT,
      Arrays.asList(ApplicationProtocolNames.HTTP_2, ApplicationProtocolNames.HTTP_1_1)))
    .build();
 }
 return scb.build();
}

代码示例来源：origin: alipay/sofa-rpc

if (SSL) {
  SslProvider provider = OpenSsl.isAlpnSupported() ? SslProvider.OPENSSL : SslProvider.JDK;
  SelfSignedCertificate ssc = new SelfSignedCertificate();
  sslCtx = io.netty.handler.ssl.SslContextBuilder.forServer(ssc.certificate(), ssc.privateKey())

代码示例来源：origin: alipay/sofa-rpc

if (SSL) {
  SslProvider provider = OpenSsl.isAlpnSupported() ? SslProvider.OPENSSL : SslProvider.JDK;
  SelfSignedCertificate ssc = new SelfSignedCertificate();
  sslCtx = io.netty.handler.ssl.SslContextBuilder.forServer(ssc.certificate(), ssc.privateKey())

代码示例来源：origin: io.vertx/vertx-core

/**
 * @return when alpn support is available via OpenSSL engine
 */
public static boolean isAlpnAvailable() {
 return OpenSsl.isAlpnSupported();
}

代码示例来源：origin: vmware/xenon

private static boolean initializeALPNEnabled() {
  String property = XenonConfiguration.string(
      NettyChannelContext.class,
      "isALPNEnabled",
      null);
  return (property != null) ? Boolean.parseBoolean(property) : OpenSsl.isAlpnSupported();
}

代码示例来源：origin: com.netflix.zuul/zuul-core

public static SslProvider chooseSslProvider() {
  // Use openssl only if available and has ALPN support (ie. version > 1.0.2).
  SslProvider sslProvider;
  if (ALLOW_USE_OPENSSL.get() && OpenSsl.isAvailable() && OpenSsl.isAlpnSupported()) {
    sslProvider = SslProvider.OPENSSL;
  }
  else {
    sslProvider = SslProvider.JDK;
  }
  return sslProvider;
}

代码示例来源：origin: org.jooby/jooby-netty

static SslContext build(final Config conf) throws IOException, CertificateException {
 String tmpdir = conf.getString("application.tmpdir");
 boolean http2 = conf.getBoolean("server.http2.enabled");
 File keyStoreCert = toFile(conf.getString("ssl.keystore.cert"), tmpdir);
 File keyStoreKey = toFile(conf.getString("ssl.keystore.key"), tmpdir);
 String keyStorePass = conf.hasPath("ssl.keystore.password")
   ? conf.getString("ssl.keystore.password") : null;
 SslContextBuilder scb = SslContextBuilder.forServer(keyStoreCert, keyStoreKey, keyStorePass);
 if (conf.hasPath("ssl.trust.cert")) {
  scb.trustManager(toFile(conf.getString("ssl.trust.cert"), tmpdir))
    .clientAuth(ClientAuth.REQUIRE);
 }
 if (http2) {
  SslProvider provider = OpenSsl.isAlpnSupported() ? SslProvider.OPENSSL : SslProvider.JDK;
  return scb.sslProvider(provider)
    .ciphers(Http2SecurityUtil.CIPHERS, SupportedCipherSuiteFilter.INSTANCE)
    .applicationProtocolConfig(new ApplicationProtocolConfig(
      Protocol.ALPN,
      SelectorFailureBehavior.NO_ADVERTISE,
      SelectedListenerFailureBehavior.ACCEPT,
      Arrays.asList(ApplicationProtocolNames.HTTP_2, ApplicationProtocolNames.HTTP_1_1)))
    .build();
 }
 return scb.build();
}

代码示例来源：origin: org.infinispan/infinispan-server-rest

public BenchmarkHttpClient(String keystorePath, String keystorePassword, String trustStorePath, String trustStorePassword) throws Exception {
 if (!OpenSsl.isAlpnSupported()) {
   throw new IllegalStateException("OpenSSL is not present, can not test TLS/ALPN support");
 }
 nettyHttpClient = NettyHttpClient.newHttp2ClientWithALPN(keystorePath, keystorePassword);
 SslContextFactory sslContextFactory = new SslContextFactory();
 sslContextFactory.setTrustStorePassword(trustStorePath);
 sslContextFactory.setTrustStorePassword(trustStorePassword);
 sslContextFactory.setKeyStorePath(keystorePath);
 sslContextFactory.setKeyStorePassword(keystorePassword);
 http1Client = new HttpClient(sslContextFactory);
 usesTLS = true;
}

代码示例来源：origin: org.infinispan/infinispan-server-rest

public static SslContext createTruststoreContext(String truststore, char[] password, String... alpnProtocols) throws Exception {
 KeyStore ks = KeyStore.getInstance("JKS");
 ks.load(new FileInputStream(truststore), password);
 KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
 kmf.init(ks, password);
 SslProvider provider = OpenSsl.isAlpnSupported() ? SslProvider.OPENSSL : SslProvider.JDK;
 return SslContextBuilder.forClient()
    .sslProvider(provider)
    .keyManager(kmf)
    .ciphers(Http2SecurityUtil.CIPHERS, SupportedCipherSuiteFilter.INSTANCE)
    .trustManager(InsecureTrustManagerFactory.INSTANCE)
    .applicationProtocolConfig(new ApplicationProtocolConfig(
       ApplicationProtocolConfig.Protocol.ALPN,
       ApplicationProtocolConfig.SelectorFailureBehavior.CHOOSE_MY_LAST_PROTOCOL,
       ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
       alpnProtocols))
    .build();
}

代码示例来源：origin: reactor/reactor-netty

void updateDefaultConfiguration() {
  switch (type) {
    case H2:
      sslContextBuilder.sslProvider(
                 OpenSsl.isAlpnSupported() ?
                     io.netty.handler.ssl.SslProvider.OPENSSL :
                     io.netty.handler.ssl.SslProvider.JDK)
               .ciphers(Http2SecurityUtil.CIPHERS, SupportedCipherSuiteFilter.INSTANCE)
               .applicationProtocolConfig(new ApplicationProtocolConfig(
                 ApplicationProtocolConfig.Protocol.ALPN,
                 ApplicationProtocolConfig.SelectorFailureBehavior.NO_ADVERTISE,
                 ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
                 ApplicationProtocolNames.HTTP_2,
                 ApplicationProtocolNames.HTTP_1_1));
      break;
    case TCP:
      sslContextBuilder.sslProvider(
                 OpenSsl.isAvailable() ?
                     io.netty.handler.ssl.SslProvider.OPENSSL :
                     io.netty.handler.ssl.SslProvider.JDK);
      break;
    case NONE:
      break; //no default configuration
  }
}

代码示例来源：origin: io.projectreactor.netty/reactor-netty

void updateDefaultConfiguration() {
  switch (type) {
    case H2:
      sslContextBuilder.sslProvider(
                 OpenSsl.isAlpnSupported() ?
                     io.netty.handler.ssl.SslProvider.OPENSSL :
                     io.netty.handler.ssl.SslProvider.JDK)
               .ciphers(Http2SecurityUtil.CIPHERS, SupportedCipherSuiteFilter.INSTANCE)
               .applicationProtocolConfig(new ApplicationProtocolConfig(
                 ApplicationProtocolConfig.Protocol.ALPN,
                 ApplicationProtocolConfig.SelectorFailureBehavior.NO_ADVERTISE,
                 ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
                 ApplicationProtocolNames.HTTP_2,
                 ApplicationProtocolNames.HTTP_1_1));
      break;
    case TCP:
      sslContextBuilder.sslProvider(
                 OpenSsl.isAvailable() ?
                     io.netty.handler.ssl.SslProvider.OPENSSL :
                     io.netty.handler.ssl.SslProvider.JDK);
      break;
    case NONE:
      break; //no default configuration
  }
}

代码示例来源：origin: org.wso2.carbon.transport/org.wso2.carbon.transport.http.netty

/**
 * This method will provide netty ssl context which supports HTTP2 over TLS using
 * Application Layer Protocol Negotiation (ALPN)
 *
 * @return instance of {@link SslContext}
 * @throws SSLException if any error occurred during building SSL context.
 */
public SslContext createHttp2TLSContext() throws SSLException {
  // If listener configuration does not include cipher suites , default ciphers required by the HTTP/2
  // specification will be added.
  List<String> ciphers = sslConfig.getCipherSuites() != null && sslConfig.getCipherSuites().length > 0 ? Arrays
      .asList(sslConfig.getCipherSuites()) : Http2SecurityUtil.CIPHERS;
  SslProvider provider = OpenSsl.isAlpnSupported() ? SslProvider.OPENSSL : SslProvider.JDK;
  return SslContextBuilder.forServer(this.getKeyManagerFactory())
      .trustManager(this.getTrustStoreFactory())
      .sslProvider(provider)
      .ciphers(ciphers,
          SupportedCipherSuiteFilter.INSTANCE)
      .clientAuth(needClientAuth ? ClientAuth.REQUIRE : ClientAuth.NONE)
      .applicationProtocolConfig(new ApplicationProtocolConfig(
          ApplicationProtocolConfig.Protocol.ALPN,
          // NO_ADVERTISE is currently the only mode supported by both OpenSsl and JDK providers.
          ApplicationProtocolConfig.SelectorFailureBehavior.NO_ADVERTISE,
          // ACCEPT is currently the only mode supported by both OpenSsl and JDK providers.
          ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
          ApplicationProtocolNames.HTTP_2,
          ApplicationProtocolNames.HTTP_1_1)).build();
}

代码示例来源：origin: reactor/reactor-netty

@Test
public void testSslConfigurationProtocolH2_1() {
  DisposableServer disposableServer =
      server.secure(spec -> spec.sslContext(builder))
         .protocol(HttpProtocol.H2)
         .bindNow();
  assertEquals(2, protocols.size());
  assertTrue(protocols.contains("h2"));
  assertTrue(OpenSsl.isAlpnSupported() ? sslContext instanceof OpenSslContext :
                      sslContext instanceof JdkSslContext);
  disposableServer.disposeNow();
}

代码示例来源：origin: reactor/reactor-netty

@Test
public void testProtocolH2SslConfiguration() {
  DisposableServer disposableServer =
      server.protocol(HttpProtocol.H2)
         .secure(spec -> spec.sslContext(builder))
         .bindNow();
  assertEquals(2, protocols.size());
  assertTrue(protocols.contains("h2"));
  assertTrue(OpenSsl.isAlpnSupported() ? sslContext instanceof OpenSslContext :
                      sslContext instanceof JdkSslContext);
  disposableServer.disposeNow();
}

代码示例来源：origin: reactor/reactor-netty

@Test
  public void testSslConfigurationProtocolH2_2() {
    DisposableServer disposableServer =
        server.protocol(HttpProtocol.HTTP11)
           .secure(spec -> spec.sslContext(builder))
           .protocol(HttpProtocol.H2)
           .bindNow();
    assertEquals(2, protocols.size());
    assertTrue(protocols.contains("h2"));
    assertTrue(OpenSsl.isAlpnSupported() ? sslContext instanceof OpenSslContext :
                        sslContext instanceof JdkSslContext);
    disposableServer.disposeNow();
  }
}

代码示例来源：origin: org.infinispan/infinispan-server-rest

@Test
public void shouldUpgradeUsingALPN() throws Exception {
  SkipTestNG.skipSinceJDK(10); // TODO: OpenSSL ALPN doesn't seem to work. Restructure the test to use internal JDK ALPN
  if (!OpenSsl.isAlpnSupported()) {
    throw new IllegalStateException("OpenSSL is not present, can not test TLS/ALPN support. Version: " + OpenSsl.versionString() + " Cause: " + OpenSsl.unavailabilityCause());
  }
  //given
  restServer = RestServerHelper.defaultRestServer("http2testcache")
     .withKeyStore(KEY_STORE_PATH, "secret", "pkcs12")
     .start(TestResourceTracker.getCurrentTestShortName());
  client = NettyHttpClient.newHttp2ClientWithALPN(KEY_STORE_PATH, "secret");
  client.start(restServer.getHost(), restServer.getPort());
  FullHttpRequest putValueInCacheRequest = new DefaultFullHttpRequest(HTTP_1_1, POST, "/rest/http2testcache/test",
     wrappedBuffer("test".getBytes(CharsetUtil.UTF_8)));
  //when
  client.sendRequest(putValueInCacheRequest);
  Queue<FullHttpResponse> responses = client.getResponses();
  //then
  Assertions.assertThat(responses).hasSize(1);
  Assertions.assertThat(responses.element().status().code()).isEqualTo(200);
  Assertions.assertThat(restServer.getCacheManager().getCache("http2testcache").size()).isEqualTo(1);
}

内容来源于网络，如有侵权，请联系作者删除！

OpenSsl

相关文章

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新文章

    更多
    • 蜀ICP备2022004421号-2 NULL123 https://www.null123.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com