public final class ConnectionSpec extends Object
https: URLs, this includes the TLS version and cipher suites to use when negotiating a secure
connection.
The TLS versions configured in a connection spec are only be used if they are also enabled in the SSL socket. For example, if an SSL socket does not have TLS 1.3 enabled, it will not be used even if it is present on the connection spec. The same policy also applies to cipher suites.
Use ConnectionSpec.Builder.allEnabledTlsVersions() and ConnectionSpec.Builder.allEnabledCipherSuites() to
defer all feature selection to the underlying SSL socket.
| Modifier and Type | Class and Description |
|---|---|
static class |
ConnectionSpec.Builder |
| Modifier and Type | Field and Description |
|---|---|
static ConnectionSpec |
CLEARTEXT
Unencrypted, unauthenticated connections for
http: URLs. |
static ConnectionSpec |
COMPATIBLE_TLS
A backwards-compatible fallback connection for interop with obsolete servers.
|
static ConnectionSpec |
MODERN_TLS
A modern TLS connection with extensions like SNI and ALPN available.
|
static ConnectionSpec |
RESTRICTED_TLS
A secure TLS connection assuming a modern client platform and server.
|
| Modifier and Type | Method and Description |
|---|---|
List<CipherSuite> |
cipherSuites() |
boolean |
equals(Object other) |
int |
hashCode() |
boolean |
isCompatible(SSLSocket socket) |
boolean |
isTls() |
boolean |
supportsTlsExtensions() |
List<TlsVersion> |
tlsVersions() |
String |
toString() |
public static final ConnectionSpec CLEARTEXT
http: URLs.public static final ConnectionSpec RESTRICTED_TLS
public static final ConnectionSpec MODERN_TLS
public static final ConnectionSpec COMPATIBLE_TLS
public boolean isTls()
public List<CipherSuite> cipherSuites()
public List<TlsVersion> tlsVersions()
public boolean supportsTlsExtensions()
public boolean isCompatible(SSLSocket socket)
Copyright © 2019. All rights reserved.