Interface PkiServerTlsProvider

public interface PkiServerTlsProvider
Explicit server-local boundary for lifecycle-confined JSSE key and trust material.

Implementations may load a private key only inside JSSE key-manager construction. They must not return key stores, keys, passwords, aliases, or provider exception details. Providers are discovered deterministically but are activated only by an exact configured id().

Thread safety

Implementations must be thread-safe; the same provider instance may be called from multiple threads during server startup.

Since:
1.0

  • Method Summary

    Modifier and Type
    Method
    Description
    SSLContext
    create(ProviderConfig configuration)
    Creates one fully initialized mutual-TLS context.
    String
    id()
    Returns the stable explicit provider identity.

  • Method Details

    • id

      String id()
      Returns the stable explicit provider identity.
      Returns:
      provider identity used in configuration; never null

    • create

      SSLContext create(ProviderConfig configuration) throws Exception
      Creates one fully initialized mutual-TLS context.
      Parameters:
      configuration - opaque provider configuration that must be validated strictly; never null
      Returns:
      initialized JSSE context containing server identity and client trust; never null
      Throws:
      Exception - when material is unavailable, expired, or invalid