-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathTLSSocket.java
More file actions
150 lines (120 loc) · 3.73 KB
/
Copy pathTLSSocket.java
File metadata and controls
150 lines (120 loc) · 3.73 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.util.List;
import java.util.concurrent.CopyOnWriteArrayList;
import javax.net.ssl.HandshakeCompletedEvent;
import javax.net.ssl.HandshakeCompletedListener;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocket;
import org.bouncycastle.crypto.tls.TlsClientProtocol;
public class TLSSocket extends SSLSocket {
public static final String[] SUPPORT_PROTOCOLS = {"SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2"};
public static final String[] ENABLED_PROTOCOLS = {"TLSv1", "TLSv1.1", "TLSv1.2"};
public static final String[] CIPHER_SUITES = {
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
"TLS_RSA_WITH_AES_128_GCM_SHA256",
"TLS_RSA_WITH_AES_128_CBC_SHA256",
"TLS_RSA_WITH_AES_128_CBC_SHA"
};
protected String host = "";
protected int port;
protected boolean selfSignPass = false;
protected TLSSession session;
protected TlsClientProtocol tlsClientProtocol;
protected List<HandshakeCompletedListener> listeners = new CopyOnWriteArrayList<HandshakeCompletedListener>();
public TLSSocket(String host, int port, TlsClientProtocol in, boolean selfSignPass) {
super();
this.host = host;
this.port = port;
tlsClientProtocol = in;
this.selfSignPass = selfSignPass;
}
public boolean isSelfSignPass() {
return selfSignPass;
}
@Override
public InputStream getInputStream() {
return tlsClientProtocol.getInputStream();
}
@Override
public OutputStream getOutputStream() {
return tlsClientProtocol.getOutputStream();
}
@Override
public void addHandshakeCompletedListener(HandshakeCompletedListener arg0) {
listeners.add(arg0);
}
@Override
public boolean getEnableSessionCreation() {
return false;
}
@Override
public String[] getEnabledCipherSuites() {
return CIPHER_SUITES;
}
@Override
public String[] getEnabledProtocols() {
return ENABLED_PROTOCOLS;
}
@Override
public boolean getNeedClientAuth() {
return false;
}
@Override
public SSLSession getSession() {
return this.session;
}
@Override
public String[] getSupportedCipherSuites() {
return CIPHER_SUITES;
}
@Override
public String[] getSupportedProtocols() {
return SUPPORT_PROTOCOLS;
}
@Override
public boolean getUseClientMode() {
return false;
}
@Override
public boolean getWantClientAuth() {
return false;
}
@Override
public void removeHandshakeCompletedListener(HandshakeCompletedListener arg0) {
listeners.remove(arg0);
}
@Override
public void setEnableSessionCreation(boolean arg0) {
}
@Override
public void setEnabledCipherSuites(String[] arg0) {
}
@Override
public void setEnabledProtocols(String[] arg0) {
}
@Override
public void setNeedClientAuth(boolean arg0) {
}
@Override
public void setUseClientMode(boolean arg0) {
}
@Override
public void setWantClientAuth(boolean arg0) {
}
@Override
public void startHandshake() throws IOException {
TLSClient client = new TLSClient(host, port, this);
this.session = new TLSSession(client);
tlsClientProtocol.connect(client);
for (HandshakeCompletedListener hcl : listeners) {
hcl.handshakeCompleted(new HandshakeCompletedEvent(this, this.session));
}
}
public synchronized void close() throws IOException {
tlsClientProtocol.close();
}
}