private static String[] getEnabledProtocols(Configuration config) {
    String enabledProtocolsInput = config.get(TLS_ENABLED_PROTOCOLS);
    if (enabledProtocolsInput == null) {
      return new String[] { config.get(TLS_CONFIG_PROTOCOL, DEFAULT_PROTOCOL) };
    }
    return enabledProtocolsInput.split(",");
  }
Creates a trust manager by loading the trust store from the given file of the given type,
optionally decrypting it using the given password.
@param trustStoreLocation    the location of the trust store file.
@param trustStorePassword    optional password to decrypt the trust store (only applies to JKS
                             trust stores). If empty, assumes the trust store is not encrypted.
@param trustStoreType        must be JKS, PEM, PKCS12, BCFKS or null. If null, attempts to
                             autodetect the trust store type from the file extension (e.g. .jks
                             / .pem).
@param crlEnabled            enable CRL (certificate revocation list) checks.
@param ocspEnabled           enable OCSP (online certificate status protocol) checks.
@param verifyHostName        if true, ssl peer hostname must match name in certificate
@param allowReverseDnsLookup if true, allow falling back to reverse dns lookup in verifying
                             hostname
@return the trust manager.
@throws TrustManagerException if something goes wrong.
hbase-common/src/main/java/org/apache/hadoop/hbase/io/crypto/tls/X509Util.java