less.awful.ssl — less-awful-ssl 1.0.6

Interacting with the Java crypto APIs is one of the worst things you can do as a developer. I'm so sorry about all of this.

base64->binary clj macro

(base64->binary string)

enabled-protocols clj

An array of protocols we support.

key-manager clj

(key-manager key-store)

(key-manager key-store password)

An X.509 key manager for a KeyStore.

key-pair clj

(key-pair public-key private-key)

Creates a KeyPair from a public and private key

key-store clj

(key-store key-file cert-file)

Makes a keystore from a PKCS8 private key file, a public cert file, and the signing CA certificate.

key-store-password clj

You know, a mandatory password stored in memory so we can... encrypt... data stored in memory.

load-certificate clj

(load-certificate file)

Loads an X.509 certificate from a file.

load-certificate-chain clj

(load-certificate-chain file)

Loads an X.509 certificate chain from a file.

private-key clj

(private-key file)

Loads a private key from a PKCS8 file.

public-key clj

(public-key file)

Loads a public key from a .crt file.

rsa-key-factory clj

An RSA key factory

server-socket clj

(server-socket context host port)

Given an SSL context, makes a server SSLSocket.

socket clj

(socket context host port)

Given an SSL context, makes a client SSLSocket.

ssl-context clj

(ssl-context key-file cert-file)

(ssl-context key-file cert-file ca-cert-file)

Given a PKCS8 key file, a certificate file, and optionally, a trusted CA certificate used to verify peers, returns an SSLContext.

ssl-context->engine clj

(ssl-context->engine ctx)

ssl-context-generator clj

(ssl-context-generator key-file cert-file)

(ssl-context-generator key-file cert-file ca-cert-file)

Returns a function that yields SSL contexts. Takes a PKCS8 key file, a certificate file, and optionally, a trusted CA certificate used to verify peers.

ssl-p12-context clj

(ssl-p12-context p12 password ca-cert-file)

Given a PKCS12 key/cert file, the password, and a CA certificate that was used to sign the PKCS12, return an SSL Context

ssl-p12-context-generator clj

(ssl-p12-context-generator p12 password ca-cert-file)

Returns a function that yields an SSL contexts. Takes a PKCS12 key/cert file, the password for the PKCS12 file, and a CA certificate that was used to sign the PKCS12.

test-ssl clj

(test-ssl client-key-file
          client-cert-file
          server-key-file
          server-cert-file
          ca-cert-file)

Given keys and certificates for a client and server, and the signing CA for both, verify that we can use those files to make an SSL connection.

trust-manager clj

(trust-manager key-store)

An X.509 trust manager for a KeyStore.

trust-store clj

(trust-store ca-cert-file)

Makes a trust store, suitable for backing a TrustManager, out of a CA cert file.

x509-cert-factory clj

The X.509 certificate factory