alluxio.util.network.tls.SslContextProvider Maven / Gradle / Ivy

Go to download
/*
 * The Alluxio Open Foundation licenses this work under the Apache License, version 2.0
 * (the "License"). You may not use this work except in alluxio.shaded.client.com.liance with the License, which is
 * available at www.apache.alluxio.shaded.client.org.licenses/LICENSE-2.0
 *
 * This software is distributed on an "AS IS" basis, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
 * either express or implied, as more fully set forth in the License.
 *
 * See the NOTICE file distributed with this work for information regarding copyright ownership.
 */

package alluxio.util.network.tls;

import alluxio.conf.AlluxioConfiguration;
import alluxio.conf.PropertyKey;
import alluxio.util.CommonUtils;

import alluxio.shaded.client.io.netty.handler.ssl.SslContext;

/**
 * Interface for providing SslContext instances for TLS support.
 */
public interface SslContextProvider {

  /**
   * Factory for creating context provider implementations.
   */
  class Factory {
    private Factory() {} // prevent instantiation

    /**
     * Creates and initializes {@link SslContextProvider} implementation
     * based on Alluxio configuration.
     *
     * @return the generated {@link SslContextProvider} instance
     */
    public static SslContextProvider create(AlluxioConfiguration conf) {
      SslContextProvider provider = CommonUtils.createNewClassInstance(
          conf.getClass(PropertyKey.NETWORK_TLS_SSL_CONTEXT_PROVIDER_CLASSNAME), null, null);
      provider.init(conf);
      return provider;
    }
  }

  /**
   * Initializes provider.
   *
   * @param conf Alluxio configuration
   */
  void init(AlluxioConfiguration conf);

  /**
   * @return Singleton Ssl context for client
   */
  SslContext getClientSslContext();

  /**
   * @return SSLContext for the server side of an SSL connection
   */
  SslContext getServerSSLContext();

  /**
   * @return Singleton Ssl context for self-signed client
   */
  SslContext getSelfSignedClientSslContext();

  /**
   * @return Singleton Ssl context for self-signed server
   */
  SslContext getSelfSignedServerSslContext();
}