Package io.quarkus.vertx.http.runtime

Interface ServerSslConfig

public interface ServerSslConfig
Shared configuration for setting up server-side SSL.

  • Method Summary

    Modifier and Type
    Method
    Description
    CertificateConfig
    certificate()
    The server certificate configuration.
    Optional<List<String>>
    cipherSuites()
    The cipher suites to use.
    Set<String>
    protocols()
    Sets the ordered list of enabled SSL/TLS protocols.
    boolean
    sni()
    Enables Server Name Indication (SNI), an TLS extension allowing the server to use multiple certificates.

  • Method Details

    • certificate

      CertificateConfig certificate()
      The server certificate configuration.

    • cipherSuites

      Optional<List<String>> cipherSuites()
      The cipher suites to use. If none is given, a reasonable default is selected.

    • protocols

      @WithDefault("TLSv1.3,TLSv1.2") Set<String> protocols()
      Sets the ordered list of enabled SSL/TLS protocols.

      If not set, it defaults to "TLSv1.3, TLSv1.2". The following list of protocols are supported: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3. To only enable TLSv1.3, set the value to to "TLSv1.3".

      Note that setting an empty list, and enabling SSL/TLS is invalid. You must at least have one protocol.

    • sni

      @WithDefault("false") boolean sni()
      Enables Server Name Indication (SNI), an TLS extension allowing the server to use multiple certificates. The client indicate the server name during the TLS handshake, allowing the server to select the right certificate.