Class SimpleSSLSocketServer

  • All Implemented Interfaces:
    Runnable

    public class SimpleSSLSocketServer
    extends SimpleSocketServer
    A SimpleSocketServer that supports SSL.
          <b>Usage:</b> java ch.qos.logback.classic.net.SimpleSSLSocketServer port configFile
                         allowedAddress [allowedAddress ...]
     
    where port is a port number where the server listens, configFile is an XML configuration file fed to JoranConfigurator, and each allowedAddress is a client IP or CIDR range that is permitted to connect (e.g. 192.168.1.10 or 192.168.1.0/24). At least one allowed address must be specified on the command line.

    Client IP whitelisting configured via SimpleSocketServer.addAllowedClientAddress(String) is mandatory and applies here as well when the server is embedded programmatically. An empty whitelist means no clients are allowed.

    When running the SimpleSSLServerFactory as shown above, it is necessary to configure JSSE system properties using -Dname=value on the command-line when starting the server. In particular, you will probably want/need to configure the following system properties:
    • javax.net.ssl.keyStore
    • javax.net.ssl.keyStorePassword
    • javax.net.ssl.keyStoreType
    • javax.net.ssl.trustStore
    • javax.net.ssl.trustStorePassword
    • javax.net.ssl.trustStoreType

    See the Customizing the JSSE in the JSSE Reference Guide for details on how to set these system properties.

    Author:
    Carl Harris