io.helidon.common.tls.Tls

Description

TLS configuration - common for server and client

Configuration options

Key	Type	Default	Description
trust	List<Keys>		List of certificates that form the trust manager
session-timeout	Duration	PT24H	SSL session timeout
internal-keystore-provider	String		Provider of the key stores used internally to create a key and trust manager factories
manager	TlsManager		The Tls manager
endpoint-identification-algorithm	String	HTTPS	Identification algorithm for SSL endpoints
private-key	Keys		Private key to use
key-manager-factory-algorithm	String		Algorithm of the key manager factory used when private key is defined
manager-discover-services	Boolean	false	Whether to enable automatic service discovery for manager
secure-random-provider	String		Provider to use when creating a new secure random
session-cache-size	Integer	20480	SSL session cache size
enabled	Boolean	true	Flag indicating whether Tls is enabled
revocation	RevocationConfig		Certificate revocation check configuration
protocol	String	TLS	Configure the protocol used to obtain an instance of javax.net.ssl.SSLContext
provider	String		Use explicit provider to obtain an instance of javax.net.ssl.SSLContext
client-auth	TlsClientAuth	NONE	Configure requirement for mutual TLS
cipher-suite	List<String>		Enabled cipher suites for TLS communication
internal-keystore-type	String		Type of the key stores used internally to create a key and trust manager factories
trust-manager-factory-algorithm	String		Trust manager factory algorithm
trust-all	Boolean	false	Trust any certificate provided by the other side of communication
protocols	List<String>		Enabled protocols for TLS communication
secure-random-algorithm	String		Algorithm to use when creating a new secure random

Usages

• clients.tls
• security.providers.idcs-role-mapper.oidc-config.webclient.tls
• security.providers.oidc.webclient.tls
• server.features.security.security.providers.idcs-role-mapper.oidc-config.webclient.tls
• server.features.security.security.providers.oidc.webclient.tls
• server.sockets.tls
• server.tls

---

See the manifest for all available types.