Methods of the SSLServerSocket Class
Once
you’ve successfully created and initialized an
SSLServerSocket, there are a lot of applications
you can write using nothing more than the methods inherited from
java.net.ServerSocket. However, there are times
when you need to adjust its behavior a little. Like
SSLSocket, SSLServerSocket
provides methods to choose the cipher suites it uses, to manage
sessions, and to establish whether clients are required to
authenticate themselves. Most of these methods are very similar to
the methods of the same name in SSLSocket. The
difference is that they work on the server side and set the defaults
for sockets accepted by an SSLServerSocket. In
some cases, once an SSLSocket has been accepted,
you can still use the methods of SSLSocket to
configure that one socket rather than all sockets accepted by this
SSLServerSocket.
Choosing the Cipher Suites
The SSLServerSocket
class has the same three methods for determining which cipher suites
are supported and enabled as SSLSocket does:
public abstract String[] getSupportedCipherSuites( ) public abstract String[] getEnabledCipherSuites( ) public abstract void setEnabledCipherSuites(String[] suites)
These use the same suite names as the similarly named methods in
SSLSocket. The difference is that these apply to
all sockets accepted by the SSLServerSocket rather
than to just one SSLSocket. For example, this code
fragment has the effect of enabling anonymous, unauthenticated
connections on the SSLServerSocket
server ...