com.google.api.client.http.javanet

Class NetHttpTransport.Builder

java.lang.Object

com.google.api.client.http.javanet.NetHttpTransport.Builder

Enclosing class:

NetHttpTransport

public static final class NetHttpTransport.Builder
extends Object

Builder for NetHttpTransport.

Implementation is not thread-safe.

Since:

1.13

Constructor Summary

Constructors

Constructor and Description
Builder()

Method Summary

Modifier and Type	Method and Description
NetHttpTransport	build() Returns a new instance of NetHttpTransport based on the options.
NetHttpTransport.Builder	doNotValidateCertificate() Beta Disables validating server SSL certificates by setting the SSL socket factory using SslUtils.trustAllSSLContext() for the SSL context and SslUtils.trustAllHostnameVerifier() for the host name verifier.
HostnameVerifier	getHostnameVerifier() Returns the host name verifier or null for the default.
SSLSocketFactory	getSslSocketFactory() Returns the SSL socket factory.
NetHttpTransport.Builder	setConnectionFactory(ConnectionFactory connectionFactory) Sets the ConnectionFactory or null to use a DefaultConnectionFactory.
NetHttpTransport.Builder	setHostnameVerifier(HostnameVerifier hostnameVerifier) Sets the host name verifier or null for the default.
NetHttpTransport.Builder	setProxy(Proxy proxy) Sets the HTTP proxy or null to use the proxy settings from system properties.
NetHttpTransport.Builder	setSecurityProvider(Provider securityProvider) Sets the custom security provider or null to use the default JRE provider.
NetHttpTransport.Builder	setSslSocketConfigurator(SslSocketConfigurator configurator) Sets the custom SslSocketConfigurator callback to configure active SSLSockets.
NetHttpTransport.Builder	setSslSocketFactory(SSLSocketFactory sslSocketFactory) Sets the SSL socket factory or null for the default.
NetHttpTransport.Builder	trustCertificates(KeyStore trustStore) Sets the SSL socket factory based on a root certificate trust store.
NetHttpTransport.Builder	trustCertificates(KeyStore trustStore, KeyStore mtlsKeyStore, String mtlsKeyStorePassword) Beta Sets the SSL socket factory based on a root certificate trust store and a client certificate key store.
NetHttpTransport.Builder	trustCertificatesFromJavaKeyStore(InputStream keyStoreStream, String storePass) Sets the SSL socket factory based on root certificates in a Java KeyStore.
NetHttpTransport.Builder	trustCertificatesFromStream(InputStream certificateStream) Sets the SSL socket factory based root certificates generated from the specified stream using CertificateFactory.generateCertificates(InputStream).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder()

Method Detail

setProxy

public NetHttpTransport.Builder setProxy(Proxy proxy)

Sets the HTTP proxy or null to use the proxy settings from system properties.

For example:

 setProxy(new Proxy(Proxy.Type.HTTP, new InetSocketAddress("127.0.0.1", 8080)))
 

setConnectionFactory

public NetHttpTransport.Builder setConnectionFactory(ConnectionFactory connectionFactory)

Sets the ConnectionFactory or null to use a DefaultConnectionFactory. This value is ignored if the setProxy(java.net.Proxy) has been called with a non-null value.

If you wish to use a Proxy, it should be included in your ConnectionFactory implementation.

Since:

1.20

trustCertificatesFromJavaKeyStore

public NetHttpTransport.Builder trustCertificatesFromJavaKeyStore(InputStream keyStoreStream,
                                                                  String storePass)
                                                           throws GeneralSecurityException,
                                                                  IOException

Sets the SSL socket factory based on root certificates in a Java KeyStore.

Example usage:

 trustCertificatesFromJavaKeyStore(new FileInputStream("certs.jks"), "password");
 

Parameters:

keyStoreStream - input stream to the key store (closed at the end of this method in a finally block)

storePass - password protecting the key store file

Throws:

GeneralSecurityException

IOException

Since:

1.14

trustCertificatesFromStream

public NetHttpTransport.Builder trustCertificatesFromStream(InputStream certificateStream)
                                                     throws GeneralSecurityException,
                                                            IOException

Sets the SSL socket factory based root certificates generated from the specified stream using CertificateFactory.generateCertificates(InputStream).

Example usage:

 trustCertificatesFromStream(new FileInputStream("certs.pem"));
 

Parameters:

certificateStream - certificate stream

Throws:

GeneralSecurityException

IOException

Since:

1.14

trustCertificates

public NetHttpTransport.Builder trustCertificates(KeyStore trustStore)
                                           throws GeneralSecurityException

Sets the SSL socket factory based on a root certificate trust store.

Parameters:

trustStore - certificate trust store (use for example SecurityUtils.loadKeyStore(java.security.KeyStore, java.io.InputStream, java.lang.String) or SecurityUtils.loadKeyStoreFromCertificates(java.security.KeyStore, java.security.cert.CertificateFactory, java.io.InputStream))

Throws:

GeneralSecurityException

Since:

1.14

trustCertificates

@Beta
public NetHttpTransport.Builder trustCertificates(KeyStore trustStore,
                                                        KeyStore mtlsKeyStore,
                                                        String mtlsKeyStorePassword)
                                                 throws GeneralSecurityException

Beta
Sets the SSL socket factory based on a root certificate trust store and a client certificate key store. The client certificate key store will be used to establish mutual TLS.

Parameters:

trustStore - certificate trust store (use for example SecurityUtils.loadKeyStore(java.security.KeyStore, java.io.InputStream, java.lang.String) or SecurityUtils.loadKeyStoreFromCertificates(java.security.KeyStore, java.security.cert.CertificateFactory, java.io.InputStream))

mtlsKeyStore - key store for client certificate and key to establish mutual TLS. (use for example SecurityUtils.createMtlsKeyStore(InputStream))

mtlsKeyStorePassword - password for mtlsKeyStore parameter

Throws:

GeneralSecurityException

Since:

1.38

doNotValidateCertificate

@Beta
public NetHttpTransport.Builder doNotValidateCertificate()
                                                        throws GeneralSecurityException

Beta
Disables validating server SSL certificates by setting the SSL socket factory using SslUtils.trustAllSSLContext() for the SSL context and SslUtils.trustAllHostnameVerifier() for the host name verifier.

Be careful! Disabling certificate validation is dangerous and should only be done in testing environments.

Throws:

GeneralSecurityException

getSslSocketFactory

public SSLSocketFactory getSslSocketFactory()

Returns the SSL socket factory.

setSslSocketFactory

public NetHttpTransport.Builder setSslSocketFactory(SSLSocketFactory sslSocketFactory)

Sets the SSL socket factory or null for the default.

Note: If a custom SslSocketConfigurator is also provided, it will wrap and apply its configuration callback to all sockets created by this factory.

setSecurityProvider

public NetHttpTransport.Builder setSecurityProvider(Provider securityProvider)

Sets the custom security provider or null to use the default JRE provider.

When enabling Post-Quantum Cryptography (PQC) transport:

• On JDK 8-19: A custom JCA provider (such as Conscrypt or BouncyCastle) must be configured via this method, in addition to configuring a custom SslSocketConfigurator callback to select the hybrid/PQC curves using provider-specific APIs.
• On JDK 20-26: A custom provider (like Conscrypt) is recommended, but a custom SslSocketConfigurator invoking SSLParameters.setNamedGroups(String[]) directly can be used natively without a custom JCA provider if standard JSSE supports the curves.
• On JDK 27+: Neither a custom provider nor a configurator is required as PQC algorithms are negotiated natively by default.

Parameters:

securityProvider - provider to use

setSslSocketConfigurator

public NetHttpTransport.Builder setSslSocketConfigurator(SslSocketConfigurator configurator)

Sets the custom SslSocketConfigurator callback to configure active SSLSockets.

If both a custom SSLSocketFactory (via setSslSocketFactory(SSLSocketFactory)) and a custom configurator are set, the configurator callback will be applied to all sockets created by the custom socket factory. If no custom factory is provided, the configurator will wrap and apply to sockets created by the default resolved socket factory.

When enabling Post-Quantum Cryptography (PQC) transport:

• On JDK 20-26: Callers can configure a custom SslSocketConfigurator that sets the named groups (such as X25519MLKEM768) directly on SSLParameters.
• On JDK 8-19: Callers must provide a custom SslSocketConfigurator implementation to inspect the socket types and invoke provider-specific API extensions (e.g. Conscrypt JNI interfaces) to configure the curves.

Parameters:

configurator - the callback configurator

Since:

2.1.2

getHostnameVerifier

public HostnameVerifier getHostnameVerifier()

Returns the host name verifier or null for the default.

setHostnameVerifier

public NetHttpTransport.Builder setHostnameVerifier(HostnameVerifier hostnameVerifier)

Sets the host name verifier or null for the default.

build

public NetHttpTransport build()

Returns a new instance of NetHttpTransport based on the options.