When using NIO a receiving TCP/IP End-Point often must transform bytes into a meaningful application logic Message. Grizzly provides the ProtocolParser abstraction to simplify the necessary parsing logic. Now in Grizzly 1.9.0 ParserProtocolFilter supports SSL. Just create an SSLConfig configuration by providing trust- and keystore files and hand it to ParserProtocolFilter.setSSLConfig(SSLConfig). That's it. The Grizzly sources have a ProtocolParserTest showing a simple usecase or checkout the grizzly-samples to see a more detailed example.