ktor-network-tls/io.ktor.network.tls

Package-level declarations

Types

CertificateAndKey

class CertificateAndKey(val certificateChain: Array<X509Certificate>, val key: PrivateKey)

Client certificate chain with private key.

CIOCipherSuites

object CIOCipherSuites

CIO cipher suites collection https://www.ietf.org/rfc/rfc5289.txt https://tools.ietf.org/html/rfc5288#section-3

CipherSuite

data class CipherSuite(val code: Short, val name: String, val openSSLName: String, val exchangeType: SecretExchangeType, val jdkCipherName: String, val keyStrength: Int, val fixedIvLength: Int, val ivLength: Int, val cipherTagSizeInBytes: Int, val macName: String, val macStrength: Int, val hash: HashAlgorithm, val signatureAlgorithm: SignatureAlgorithm, val cipherType: CipherType = CipherType.GCM)

Represents a TLS cipher suite

CipherType

enum CipherType : Enum<CipherType>

Cipher type.

NoPrivateKeyException

class NoPrivateKeyException(alias: String, store: KeyStore) : IllegalStateException, CopyableThrowable<NoPrivateKeyException>

Throws if failed to find PrivateKey for any alias in KeyStore.

OID

data class OID(val identifier: String)

SecretExchangeType

enum SecretExchangeType : Enum<SecretExchangeType>

TLS secret key exchange type.

ServerKeyExchangeType

enum ServerKeyExchangeType : Enum<ServerKeyExchangeType>

Server key exchange type with it's code

TLSAlertLevel

enum TLSAlertLevel : Enum<TLSAlertLevel>

TLS alert level

TLSAlertType

enum TLSAlertType : Enum<TLSAlertType>

TLS alert types with codes

TLSConfig

expect class TLSConfig

actual class TLSConfig

TLS configuration.

actual class TLSConfig

TLSConfigBuilder

expect class TLSConfigBuilder

TLSConfig builder.

actual class TLSConfigBuilder

TLSConfig builder.

actual class TLSConfigBuilder

TLSConfig builder.

TLSException

class TLSException(message: String, cause: Throwable? = null) : IOException

TLSHandshakeType

enum TLSHandshakeType : Enum<TLSHandshakeType>

TLS handshake record type

TLSRecordType

enum TLSRecordType : Enum<TLSRecordType>

TLS record type with it's numeric code

TLSVersion

enum TLSVersion : Enum<TLSVersion>

TLS version

Functions

addCertificateChain

fun TLSConfigBuilder.addCertificateChain(chain: Array<X509Certificate>, key: PrivateKey)

Add client certificate chain to use.

addKeyStore

@JvmName(name = "addKeyStoreNullablePassword")

fun TLSConfigBuilder.addKeyStore(store: KeyStore, password: CharArray?, alias: String? = null)

Add client certificates from store by using the certificate with specific alias or all certificates, if alias is null.

keysGenerationAlgorithm

fun keysGenerationAlgorithm(algorithm: String): String

Converts the provided algorithm name from the standard Signature algorithms into the corresponding KeyPairGenerator algorithm name.

takeFrom

expect fun TLSConfigBuilder.takeFrom(other: TLSConfigBuilder)

Append config from other builder.

actual fun TLSConfigBuilder.takeFrom(other: TLSConfigBuilder)

Append config from other builder.

actual fun TLSConfigBuilder.takeFrom(other: TLSConfigBuilder)

Append config from other builder.

tls

suspend fun Connection.tls(coroutineContext: CoroutineContext): Socket

suspend fun Socket.tls(coroutineContext: CoroutineContext): Socket

Make Socket connection secure with TLS.

suspend fun Connection.tls(coroutineContext: CoroutineContext, config: TLSConfig): Socket

expect suspend fun Socket.tls(coroutineContext: CoroutineContext, config: TLSConfig): Socket

Make Socket connection secure with TLS using TLSConfig.

suspend fun Connection.tls(coroutineContext: CoroutineContext, block: TLSConfigBuilder.() -> Unit): Socket

expect suspend fun Socket.tls(coroutineContext: CoroutineContext, block: TLSConfigBuilder.() -> Unit): Socket

Make Socket connection secure with TLS configured with block.

actual suspend fun Socket.tls(coroutineContext: CoroutineContext, config: TLSConfig): Socket

Make Socket connection secure with TLS using TLSConfig.

actual suspend fun Socket.tls(coroutineContext: CoroutineContext, block: TLSConfigBuilder.() -> Unit): Socket

Make Socket connection secure with TLS configured with block.

suspend fun Socket.tls(coroutineContext: CoroutineContext, trustManager: X509TrustManager? = null, randomAlgorithm: String = "NativePRNGNonBlocking", cipherSuites: List<CipherSuite> = CIOCipherSuites.SupportedSuites, serverName: String? = null): Socket

Make Socket connection secure with TLS.

actual suspend fun Socket.tls(coroutineContext: CoroutineContext, config: TLSConfig): Socket

Make Socket connection secure with TLS using TLSConfig.

actual suspend fun Socket.tls(coroutineContext: CoroutineContext, block: TLSConfigBuilder.() -> Unit): Socket

Make Socket connection secure with TLS configured with block.