io.deephaven.ssl.config.CiphersIntermediate Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of deephaven-ssl-config Show documentation

The Deephaven SSL Configuration

There is a newer version: 0.37.0

/**
 * Copyright (c) 2016-2022 Deephaven Data Labs and Patent Pending
 */
package io.deephaven.ssl.config;

import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
import io.deephaven.annotations.SingletonStyle;
import org.immutables.value.Value.Immutable;

import java.util.Arrays;
import java.util.List;

/**
 * Includes intermediate ciphers for TLSv1.3 and TLSv1.2.
 *
 * @see Intermediate
 *      compatibility
 */
@Immutable
@SingletonStyle
@JsonDeserialize(as = ImmutableCiphersIntermediate.class)
public abstract class CiphersIntermediate implements Ciphers {

    public static CiphersIntermediate of() {
        return ImmutableCiphersIntermediate.of();
    }

    public final List ciphers() {
        // Note: not including DHE ciphers here, as the default JDK does not easily allow customizing DH params.
        // See jdk.tls.server.defaultDHEParameters
        // https://docs.oracle.com/en/java/javase/11/security/java-secure-socket-extension-jsse-reference-guide.html#GUID-A41282C3-19A3-400A-A40F-86F4DA22ABA9
        return Arrays.asList(
                // TLS 1.3
                "TLS_AES_256_GCM_SHA384",
                "TLS_AES_128_GCM_SHA256",
                "TLS_CHACHA20_POLY1305_SHA256",

                // TLS 1.2
                "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
                "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
                "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
                "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
                "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256");
    }

    @Override
    public final  T walk(Visitor visitor) {
        return visitor.visit(this);
    }
}