Package org.conscrypt

Class NativeSsl

java.lang.Object

org.conscrypt.NativeSsl

final class NativeSsl
extends Object

A utility wrapper that abstracts operations on the underlying native SSL instance.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) final class	NativeSsl.BioWrapper	A utility wrapper that abstracts operations on the underlying native BIO instance.

Field Summary

Fields

Modifier and Type	Field	Description
private final SSLParametersImpl.AliasChooser	aliasChooser
private final NativeCrypto.SSLHandshakeCallbacks	handshakeCallbacks
private X509Certificate[]	localCertificates
private final ReadWriteLock	lock
private final SSLParametersImpl	parameters
private static int[]	parsedTlsNamedGroupsProperty
private final SSLParametersImpl.PSKCallbacks	pskCallbacks
private long	ssl
private static String	unparsedTlsNamedGroupsProperty

Constructor Summary

Constructors

Modifier	Constructor	Description
private	NativeSsl(long ssl, SSLParametersImpl parameters, NativeCrypto.SSLHandshakeCallbacks handshakeCallbacks, SSLParametersImpl.AliasChooser aliasChooser, SSLParametersImpl.PSKCallbacks pskCallbacks)

Method Summary

Modifier and Type	Method	Description
(package private) void	chooseClientCertificate(byte[] keyTypeBytes, int[] signatureAlgs, byte[][] asn1DerEncodedPrincipals)
(package private) int	clientPSKKeyRequested(String identityHint, byte[] identityBytesOut, byte[] key)
(package private) void	close()
(package private) void	configureServerCertificate()
(package private) int	doHandshake()
(package private) void	doHandshake(FileDescriptor fd, int timeoutMillis)
private void	enablePSKKeyManagerIfRequested()
(package private) byte[]	exportKeyingMaterial(String label, byte[] context, int length)
protected void	finalize()
(package private) void	forceRead()
(package private) byte[]	getApplicationProtocol()
private Set<String>	getCipherKeyTypes()
(package private) String	getCipherSuite()
(package private) String	getCurveNameForTesting()
(package private) int	getError(int result)
(package private) X509Certificate[]	getLocalCertificates()
(package private) int	getMaxSealOverhead()
(package private) static int[]	getParsedTlsNamedGroupsPropertyOrNull()	Returns the parsed value of the "jdk.tls.namedGroups" property.
(package private) byte[]	getPeerCertificateOcspData()
(package private) X509Certificate[]	getPeerCertificates()
(package private) byte[]	getPeerTlsSctData()
(package private) int	getPendingReadableBytes()
(package private) String	getRequestedServerName()
(package private) byte[]	getSessionId()
(package private) long	getTime()
(package private) long	getTimeout()
(package private) byte[]	getTlsChannelId()
(package private) byte[]	getTlsUnique()
(package private) String	getVersion()
(package private) void	initialize(String hostname, OpenSSLKey channelIdPrivateKey)
(package private) void	interrupt()
private boolean	isClient()
(package private) boolean	isClosed()
(package private) NativeSsl.BioWrapper	newBio()
(package private) static NativeSsl	newInstance(SSLParametersImpl parameters, NativeCrypto.SSLHandshakeCallbacks handshakeCallbacks, SSLParametersImpl.AliasChooser chooser, SSLParametersImpl.PSKCallbacks pskCallbacks)
(package private) void	offerToResumeSession(long sslSessionNativePointer)
(package private) static int[]	parseNamedGroupsProperty(String namedGroupsProperty)
(package private) static void	parseTlsNamedGroupsProperty()	Parses the "jdk.tls.namedGroups" property and stores the result in parsedTlsNamedGroupsProperty.
(package private) int	read(FileDescriptor fd, byte[] buf, int offset, int len, int timeoutMillis)
(package private) int	readDirectByteBuffer(long destAddress, int destLength)
(package private) int	serverPSKKeyRequested(String identityHint, String identity, byte[] key)
private void	setCertificate(String alias)
private void	setCertificateValidation()
private static void	setDefaultNamedGroups(long ssl, NativeSsl sslHolder)
(package private) void	setTimeout(long millis)
private void	setTlsChannelId(OpenSSLKey channelIdPrivateKey)
(package private) void	shutdown()
(package private) void	shutdown(FileDescriptor fd)
private static int	toBoringSslGroup(String javaNamedGroup)
(package private) static int[]	toBoringSslGroups(String[] javaNamedGroups)	Converts a list of java named groups to an array of groups that can be passed to BoringSSL.
private void	verifyWithSniMatchers(String serverName)
(package private) boolean	wasShutdownReceived()
(package private) boolean	wasShutdownSent()
(package private) void	write(FileDescriptor fd, byte[] buf, int offset, int len, int timeoutMillis)
(package private) int	writeDirectByteBuffer(long sourceAddress, int sourceLength)

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

parameters

private final SSLParametersImpl parameters

handshakeCallbacks

private final NativeCrypto.SSLHandshakeCallbacks handshakeCallbacks

aliasChooser

private final SSLParametersImpl.AliasChooser aliasChooser

pskCallbacks

private final SSLParametersImpl.PSKCallbacks pskCallbacks

localCertificates

private X509Certificate[] localCertificates

lock

private final ReadWriteLock lock

ssl

private volatile long ssl

parsedTlsNamedGroupsProperty

private static int[] parsedTlsNamedGroupsProperty

unparsedTlsNamedGroupsProperty

private static String unparsedTlsNamedGroupsProperty

Constructor Details

NativeSsl

private NativeSsl(long ssl,
 SSLParametersImpl parameters,
 NativeCrypto.SSLHandshakeCallbacks handshakeCallbacks,
 SSLParametersImpl.AliasChooser aliasChooser,
 SSLParametersImpl.PSKCallbacks pskCallbacks)

Method Details

newInstance

static NativeSsl newInstance(SSLParametersImpl parameters,
 NativeCrypto.SSLHandshakeCallbacks handshakeCallbacks,
 SSLParametersImpl.AliasChooser chooser,
 SSLParametersImpl.PSKCallbacks pskCallbacks)
                      throws SSLException

Throws:

SSLException

newBio

NativeSsl.BioWrapper newBio()

offerToResumeSession

void offerToResumeSession(long sslSessionNativePointer)
                   throws SSLException

Throws:

SSLException

getSessionId

byte[] getSessionId()

getTime

long getTime()

getTimeout

long getTimeout()

setTimeout

void setTimeout(long millis)

getCipherSuite

String getCipherSuite()

getCurveNameForTesting

String getCurveNameForTesting()

getPeerCertificates

X509Certificate[] getPeerCertificates()
                               throws CertificateException

Throws:

CertificateException

getLocalCertificates

X509Certificate[] getLocalCertificates()

getPeerCertificateOcspData

byte[] getPeerCertificateOcspData()

getTlsUnique

byte[] getTlsUnique()

exportKeyingMaterial

byte[] exportKeyingMaterial(String label,
 byte[] context,
 int length)
                     throws SSLException

Throws:

SSLException

getPeerTlsSctData

byte[] getPeerTlsSctData()

clientPSKKeyRequested

int clientPSKKeyRequested(String identityHint,
 byte[] identityBytesOut,
 byte[] key)

serverPSKKeyRequested

int serverPSKKeyRequested(String identityHint,
 String identity,
 byte[] key)

chooseClientCertificate

void chooseClientCertificate(byte[] keyTypeBytes,
 int[] signatureAlgs,
 byte[][] asn1DerEncodedPrincipals)
                      throws SSLException,
CertificateEncodingException

Throws:

SSLException

CertificateEncodingException

setCertificate

private void setCertificate(String alias)
                     throws CertificateEncodingException,
SSLException

Throws:

CertificateEncodingException

SSLException

getVersion

String getVersion()

getRequestedServerName

String getRequestedServerName()

getTlsChannelId

byte[] getTlsChannelId()
                throws SSLException

Throws:

SSLException

toBoringSslGroup

private static int toBoringSslGroup(String javaNamedGroup)

toBoringSslGroups

static int[] toBoringSslGroups(String[] javaNamedGroups)

Converts a list of java named groups to an array of groups that can be passed to BoringSSL.

Unknown groups are ignored, as required by the API documentation: SSLParameters.getNamedGroups()

parseNamedGroupsProperty

static int[] parseNamedGroupsProperty(String namedGroupsProperty)

setDefaultNamedGroups

private static void setDefaultNamedGroups(long ssl,
 NativeSsl sslHolder)

initialize

void initialize(String hostname,
 OpenSSLKey channelIdPrivateKey)
         throws IOException

Throws:

IOException

configureServerCertificate

void configureServerCertificate()
                         throws IOException

Throws:

IOException

verifyWithSniMatchers

private void verifyWithSniMatchers(String serverName)
                            throws SSLHandshakeException

Throws:

SSLHandshakeException

getCipherKeyTypes

private Set<String> getCipherKeyTypes()

doHandshake

void doHandshake(FileDescriptor fd,
 int timeoutMillis)
          throws CertificateException,
IOException

Throws:

CertificateException

IOException

doHandshake

int doHandshake()
         throws IOException

Throws:

IOException

read

int read(FileDescriptor fd,
 byte[] buf,
 int offset,
 int len,
 int timeoutMillis)
  throws IOException

Throws:

IOException

write

void write(FileDescriptor fd,
 byte[] buf,
 int offset,
 int len,
 int timeoutMillis)
    throws IOException

Throws:

IOException

enablePSKKeyManagerIfRequested

private void enablePSKKeyManagerIfRequested()
                                     throws SSLException

Throws:

SSLException

setTlsChannelId

private void setTlsChannelId(OpenSSLKey channelIdPrivateKey)
                      throws SSLException

Throws:

SSLException

setCertificateValidation

private void setCertificateValidation()
                               throws SSLException

Throws:

SSLException

interrupt

void interrupt()

shutdown

void shutdown(FileDescriptor fd)
       throws IOException

Throws:

IOException

shutdown

void shutdown()
       throws IOException

Throws:

IOException

wasShutdownReceived

boolean wasShutdownReceived()

wasShutdownSent

boolean wasShutdownSent()

readDirectByteBuffer

int readDirectByteBuffer(long destAddress,
 int destLength)
                  throws IOException,
CertificateException

Throws:

IOException

CertificateException

writeDirectByteBuffer

int writeDirectByteBuffer(long sourceAddress,
 int sourceLength)
                   throws IOException

Throws:

IOException

forceRead

void forceRead()
        throws IOException

Throws:

IOException

getPendingReadableBytes

int getPendingReadableBytes()

getMaxSealOverhead

int getMaxSealOverhead()

close

void close()

isClosed

boolean isClosed()

getError

int getError(int result)

getApplicationProtocol

byte[] getApplicationProtocol()

isClient

private boolean isClient()

finalize

protected void finalize()
                 throws Throwable

Overrides:

finalize in class Object

Throws:

Throwable

getParsedTlsNamedGroupsPropertyOrNull

static int[] getParsedTlsNamedGroupsPropertyOrNull()

Returns the parsed value of the "jdk.tls.namedGroups" property.

Is null if the property is not set or empty.

parseTlsNamedGroupsProperty

static void parseTlsNamedGroupsProperty()

Parses the "jdk.tls.namedGroups" property and stores the result in parsedTlsNamedGroupsProperty.

May throw an IllegalArgumentException if the property contains invalid values.