in proxy/cloudhsm/proxy/src/main/java/com/amazon/aws/pix/cloudhsm/proxy/camel/netty/NettyHttpClientInitializerFactory.java [128:150]
protected SslHandler configureClientSSLOnDemand(Channel channel) throws Exception {
if (!producer.getConfiguration().isSsl()) {
return null;
}
if (producer.getConfiguration().getSslHandler() != null) {
return producer.getConfiguration().getSslHandler();
} else if (sslContext != null) {
URI uri = new URI(producer.getEndpoint().getEndpointUri());
SSLEngine engine = sslContext.newEngine(channel.alloc(), uri.getHost(), uri.getPort());
engine.setUseClientMode(true);
SSLParameters sslParameters = engine.getSSLParameters();
sslParameters.setServerNames(Arrays.asList(new SNIHostName(uri.getHost())));
engine.setSSLParameters(sslParameters);
if (producer.getConfiguration().getSslContextParameters() == null) {
// just set the enabledProtocols if the SslContextParameter doesn't set
engine.setEnabledProtocols(producer.getConfiguration().getEnabledProtocols().split(","));
}
return new SslHandler(engine);
}
return null;
}