Package org.conscrypt

Class Platform

java.lang.Object

org.conscrypt.Platform

@Internal
public final class Platform
extends Object

Platform-specific methods for OpenJDK. Uses reflection to implement Java 8 SSL features for backwards compatibility.

Field Summary

Fields

Modifier and Type	Field	Description
private static boolean	DEPRECATED_TLS_V1
private static boolean	ENABLED_TLS_V1
private static boolean	FILTERED_TLS_V1
private static final Method	GET_CURVE_NAME_METHOD
private static final int	JAVA_VERSION

Constructor Summary

Constructors

Modifier	Constructor	Description
private	Platform()

Method Summary

Modifier and Type	Method	Description
private static int	androidSdkInt()	Returns the Android SDK int if this is an Android platform, or 0 if it is not.
(package private) static void	blockGuardOnNetwork()
(package private) static boolean	canExecuteExecutable(File file)
(package private) static void	checkClientTrusted(X509TrustManager tm, X509Certificate[] chain, String authType, AbstractConscryptSocket socket)
(package private) static void	checkClientTrusted(X509TrustManager tm, X509Certificate[] chain, String authType, ConscryptEngine engine)
(package private) static void	checkServerTrusted(X509TrustManager tm, X509Certificate[] chain, String authType, AbstractConscryptSocket socket)
(package private) static void	checkServerTrusted(X509TrustManager tm, X509Certificate[] chain, String authType, ConscryptEngine engine)
(package private) static void	closeGuardClose(Object guardObj)
(package private) static Object	closeGuardGet()
(package private) static void	closeGuardOpen(Object guardObj, String message)
(package private) static void	closeGuardWarnIfOpen(Object guardObj)
(package private) static ConscryptEngineSocket	createEngineSocket(String hostname, int port, InetAddress clientAddress, int clientPort, SSLParametersImpl sslParameters)
(package private) static ConscryptEngineSocket	createEngineSocket(String hostname, int port, SSLParametersImpl sslParameters)
(package private) static ConscryptEngineSocket	createEngineSocket(InetAddress address, int port, InetAddress clientAddress, int clientPort, SSLParametersImpl sslParameters)
(package private) static ConscryptEngineSocket	createEngineSocket(InetAddress address, int port, SSLParametersImpl sslParameters)
(package private) static ConscryptEngineSocket	createEngineSocket(Socket socket, String hostname, int port, boolean autoClose, SSLParametersImpl sslParameters)
(package private) static ConscryptEngineSocket	createEngineSocket(SSLParametersImpl sslParameters)
(package private) static ConscryptFileDescriptorSocket	createFileDescriptorSocket(String hostname, int port, InetAddress clientAddress, int clientPort, SSLParametersImpl sslParameters)
(package private) static ConscryptFileDescriptorSocket	createFileDescriptorSocket(String hostname, int port, SSLParametersImpl sslParameters)
(package private) static ConscryptFileDescriptorSocket	createFileDescriptorSocket(InetAddress address, int port, InetAddress clientAddress, int clientPort, SSLParametersImpl sslParameters)
(package private) static ConscryptFileDescriptorSocket	createFileDescriptorSocket(InetAddress address, int port, SSLParametersImpl sslParameters)
(package private) static ConscryptFileDescriptorSocket	createFileDescriptorSocket(Socket socket, String hostname, int port, boolean autoClose, SSLParametersImpl sslParameters)
(package private) static ConscryptFileDescriptorSocket	createFileDescriptorSocket(SSLParametersImpl sslParameters)
(package private) static File	createTempFile(String prefix, String suffix, File directory)	Approximates the behavior of File.createTempFile without depending on SecureRandom.
(package private) static AlgorithmParameterSpec	fromGCMParameters(AlgorithmParameters params)	Convert from an opaque AlgorithmParameters to the platform's GCMParameterSpec.
(package private) static GCMParameters	fromGCMParameterSpec(AlgorithmParameterSpec params)	Convert from platform's GCMParameterSpec to our internal version.
(package private) static String	getCurveName(ECParameterSpec spec)
(package private) static KeyStore	getDefaultCertKeyStore()
static ConscryptHostnameVerifier	getDefaultHostnameVerifier()
(package private) static String	getDefaultProviderName()	Default name used in the JCE system by OpenSSLProvider if the default constructor is used.
(package private) static String	getEndpointIdentificationAlgorithm(SSLParameters params)
(package private) static FileDescriptor	getFileDescriptor(Socket s)
(package private) static FileDescriptor	getFileDescriptorFromSSLSocket(AbstractConscryptSocket socket)
(package private) static String	getHostStringFromInetSocketAddress(InetSocketAddress addr)
(package private) static long	getMillisSinceBoot()
static String	getOriginalHostNameFromInetAddress(InetAddress addr)
(package private) static void	getSSLParameters(SSLParameters params, SSLParametersImpl impl)
(package private) static void	getSSLParameters(SSLParameters params, SSLParametersImpl impl, AbstractConscryptSocket socket)
(package private) static void	getSSLParameters(SSLParameters params, SSLParametersImpl impl, ConscryptEngine engine)
static StatsLog	getStatsLog()
static Source	getStatsSource()
private static ClassLoader	getSystemClassLoader()
static int[]	getUids()
static boolean	isCTVerificationRequired(String hostname)	Check if SCT verification is required for a given hostname.
static boolean	isJavaxCertificateSupported()
static boolean	isPakeSupported()
static boolean	isSdkGreater(int sdk)
(package private) static boolean	isSniEnabledByDefault()	For unbundled versions, SNI is always enabled by default.
static boolean	isTlsV1Deprecated()
static boolean	isTlsV1Filtered()
static boolean	isTlsV1Supported()
(package private) static int	javaVersion()
private static int	javaVersion0()
private static int	majorVersion(String javaSpecVersion)
private static int	majorVersionFromJavaSpecificationVersion()
(package private) static CertBlocklist	newDefaultBlocklist()
(package private) static CertificateTransparency	newDefaultCertificateTransparency()
(package private) static ConscryptCertStore	newDefaultCertStore()
(package private) static String	oidToAlgorithmName(String oid)	OID to Algorithm Name mapping.
(package private) static boolean	provideTrustManagerByDefault()
static CertificateTransparencyVerificationReason	reasonCTVerificationRequired(String hostname)
(package private) static boolean	serverNamePermitted(SSLParametersImpl parameters, String serverName)
(package private) static void	setCurveName(ECParameterSpec spec, String curveName)
(package private) static void	setEndpointIdentificationAlgorithm(SSLParameters params, String endpointIdentificationAlgorithm)
(package private) static void	setSocketWriteTimeout(Socket s, long timeoutMillis)
(package private) static void	setSSLParameters(SSLParameters params, SSLParametersImpl impl)
(package private) static void	setSSLParameters(SSLParameters params, SSLParametersImpl impl, AbstractConscryptSocket socket)
(package private) static void	setSSLParameters(SSLParameters params, SSLParametersImpl impl, ConscryptEngine engine)
static void	setup(boolean deprecatedTlsV1, boolean enabledTlsV1)
(package private) static boolean	supportsConscryptCertStore()
(package private) static boolean	supportsX509ExtendedTrustManager()
(package private) static AlgorithmParameterSpec	toGCMParameterSpec(int tagLenInBits, byte[] iv)	Creates a platform version of GCMParameterSpec.
(package private) static SSLEngine	unwrapEngine(SSLEngine engine)
(package private) static SSLEngine	wrapEngine(ConscryptEngine engine)
(package private) static SSLSocketFactory	wrapSocketFactoryIfNeeded(OpenSSLSocketFactoryImpl factory)	Currently we don't wrap anything from the RI.
(package private) static SSLSession	wrapSSLSession(ExternalSession sslSession)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

JAVA_VERSION

private static final int JAVA_VERSION

GET_CURVE_NAME_METHOD

private static final Method GET_CURVE_NAME_METHOD

DEPRECATED_TLS_V1

private static boolean DEPRECATED_TLS_V1

ENABLED_TLS_V1

private static boolean ENABLED_TLS_V1

FILTERED_TLS_V1

private static boolean FILTERED_TLS_V1

Constructor Details

Platform

private Platform()

Method Details

setup

public static void setup(boolean deprecatedTlsV1,
 boolean enabledTlsV1)

createTempFile

static File createTempFile(String prefix,
 String suffix,
 File directory)
                    throws IOException

Approximates the behavior of File.createTempFile without depending on SecureRandom.

Throws:

IOException

getDefaultProviderName

static String getDefaultProviderName()

Default name used in the JCE system by OpenSSLProvider if the default constructor is used.

provideTrustManagerByDefault

static boolean provideTrustManagerByDefault()

canExecuteExecutable

static boolean canExecuteExecutable(File file)
                             throws IOException

Throws:

IOException

getFileDescriptor

static FileDescriptor getFileDescriptor(Socket s)

getFileDescriptorFromSSLSocket

static FileDescriptor getFileDescriptorFromSSLSocket(AbstractConscryptSocket socket)

getCurveName

static String getCurveName(ECParameterSpec spec)

setCurveName

static void setCurveName(ECParameterSpec spec,
 String curveName)

setSocketWriteTimeout

static void setSocketWriteTimeout(Socket s,
 long timeoutMillis)
                           throws SocketException

Throws:

SocketException

setSSLParameters

static void setSSLParameters(SSLParameters params,
 SSLParametersImpl impl)

setSSLParameters

static void setSSLParameters(SSLParameters params,
 SSLParametersImpl impl,
 AbstractConscryptSocket socket)

getSSLParameters

static void getSSLParameters(SSLParameters params,
 SSLParametersImpl impl)

getSSLParameters

static void getSSLParameters(SSLParameters params,
 SSLParametersImpl impl,
 AbstractConscryptSocket socket)

setSSLParameters

static void setSSLParameters(SSLParameters params,
 SSLParametersImpl impl,
 ConscryptEngine engine)

getSSLParameters

static void getSSLParameters(SSLParameters params,
 SSLParametersImpl impl,
 ConscryptEngine engine)

setEndpointIdentificationAlgorithm

static void setEndpointIdentificationAlgorithm(SSLParameters params,
 String endpointIdentificationAlgorithm)

getEndpointIdentificationAlgorithm

static String getEndpointIdentificationAlgorithm(SSLParameters params)

checkClientTrusted

static void checkClientTrusted(X509TrustManager tm,
 X509Certificate[] chain,
 String authType,
 AbstractConscryptSocket socket)
                        throws CertificateException

Throws:

CertificateException

checkServerTrusted

static void checkServerTrusted(X509TrustManager tm,
 X509Certificate[] chain,
 String authType,
 AbstractConscryptSocket socket)
                        throws CertificateException

Throws:

CertificateException

checkClientTrusted

static void checkClientTrusted(X509TrustManager tm,
 X509Certificate[] chain,
 String authType,
 ConscryptEngine engine)
                        throws CertificateException

Throws:

CertificateException

checkServerTrusted

static void checkServerTrusted(X509TrustManager tm,
 X509Certificate[] chain,
 String authType,
 ConscryptEngine engine)
                        throws CertificateException

Throws:

CertificateException

isSniEnabledByDefault

static boolean isSniEnabledByDefault()

For unbundled versions, SNI is always enabled by default.

wrapEngine

static SSLEngine wrapEngine(ConscryptEngine engine)

unwrapEngine

static SSLEngine unwrapEngine(SSLEngine engine)

createEngineSocket

static ConscryptEngineSocket createEngineSocket(SSLParametersImpl sslParameters)
                                         throws IOException

Throws:

IOException

createEngineSocket

static ConscryptEngineSocket createEngineSocket(String hostname,
 int port,
 SSLParametersImpl sslParameters)
                                         throws IOException

Throws:

IOException

createEngineSocket

static ConscryptEngineSocket createEngineSocket(InetAddress address,
 int port,
 SSLParametersImpl sslParameters)
                                         throws IOException

Throws:

IOException

createEngineSocket

static ConscryptEngineSocket createEngineSocket(String hostname,
 int port,
 InetAddress clientAddress,
 int clientPort,
 SSLParametersImpl sslParameters)
                                         throws IOException

Throws:

IOException

createEngineSocket

static ConscryptEngineSocket createEngineSocket(InetAddress address,
 int port,
 InetAddress clientAddress,
 int clientPort,
 SSLParametersImpl sslParameters)
                                         throws IOException

Throws:

IOException

createEngineSocket

static ConscryptEngineSocket createEngineSocket(Socket socket,
 String hostname,
 int port,
 boolean autoClose,
 SSLParametersImpl sslParameters)
                                         throws IOException

Throws:

IOException

createFileDescriptorSocket

static ConscryptFileDescriptorSocket createFileDescriptorSocket(SSLParametersImpl sslParameters)
                                                         throws IOException

Throws:

IOException

createFileDescriptorSocket

static ConscryptFileDescriptorSocket createFileDescriptorSocket(String hostname,
 int port,
 SSLParametersImpl sslParameters)
                                                         throws IOException

Throws:

IOException

createFileDescriptorSocket

static ConscryptFileDescriptorSocket createFileDescriptorSocket(InetAddress address,
 int port,
 SSLParametersImpl sslParameters)
                                                         throws IOException

Throws:

IOException

createFileDescriptorSocket

static ConscryptFileDescriptorSocket createFileDescriptorSocket(String hostname,
 int port,
 InetAddress clientAddress,
 int clientPort,
 SSLParametersImpl sslParameters)
                                                         throws IOException

Throws:

IOException

createFileDescriptorSocket

static ConscryptFileDescriptorSocket createFileDescriptorSocket(InetAddress address,
 int port,
 InetAddress clientAddress,
 int clientPort,
 SSLParametersImpl sslParameters)
                                                         throws IOException

Throws:

IOException

createFileDescriptorSocket

static ConscryptFileDescriptorSocket createFileDescriptorSocket(Socket socket,
 String hostname,
 int port,
 boolean autoClose,
 SSLParametersImpl sslParameters)
                                                         throws IOException

Throws:

IOException

wrapSocketFactoryIfNeeded

static SSLSocketFactory wrapSocketFactoryIfNeeded(OpenSSLSocketFactoryImpl factory)

Currently we don't wrap anything from the RI.

fromGCMParameterSpec

static GCMParameters fromGCMParameterSpec(AlgorithmParameterSpec params)

Convert from platform's GCMParameterSpec to our internal version.

fromGCMParameters

static AlgorithmParameterSpec fromGCMParameters(AlgorithmParameters params)

Convert from an opaque AlgorithmParameters to the platform's GCMParameterSpec.

toGCMParameterSpec

static AlgorithmParameterSpec toGCMParameterSpec(int tagLenInBits,
 byte[] iv)

Creates a platform version of GCMParameterSpec.

closeGuardGet

static Object closeGuardGet()

closeGuardOpen

static void closeGuardOpen(Object guardObj,
 String message)

closeGuardClose

static void closeGuardClose(Object guardObj)

closeGuardWarnIfOpen

static void closeGuardWarnIfOpen(Object guardObj)

blockGuardOnNetwork

static void blockGuardOnNetwork()

oidToAlgorithmName

static String oidToAlgorithmName(String oid)

OID to Algorithm Name mapping.

wrapSSLSession

static SSLSession wrapSSLSession(ExternalSession sslSession)

getOriginalHostNameFromInetAddress

public static String getOriginalHostNameFromInetAddress(InetAddress addr)

getHostStringFromInetSocketAddress

static String getHostStringFromInetSocketAddress(InetSocketAddress addr)

supportsX509ExtendedTrustManager

static boolean supportsX509ExtendedTrustManager()

isCTVerificationRequired

public static boolean isCTVerificationRequired(String hostname)

Check if SCT verification is required for a given hostname. SCT Verification is enabled using Security properties. The "conscrypt.ct.enable" property must be true, as well as a per domain property. The reverse notation of the domain name, prefixed with "conscrypt.ct.enforce." is used as the property name. Basic globbing is also supported. For example, for the domain foo.bar.com, the following properties will be looked up, in order of precedence. - conscrypt.ct.enforce.com.bar.foo - conscrypt.ct.enforce.com.bar.* - conscrypt.ct.enforce.com.* - conscrypt.ct.enforce.*

reasonCTVerificationRequired

public static CertificateTransparencyVerificationReason reasonCTVerificationRequired(String hostname)

supportsConscryptCertStore

static boolean supportsConscryptCertStore()

getDefaultCertKeyStore

static KeyStore getDefaultCertKeyStore()
                                throws KeyStoreException

Throws:

KeyStoreException

newDefaultCertStore

static ConscryptCertStore newDefaultCertStore()

newDefaultBlocklist

static CertBlocklist newDefaultBlocklist()

newDefaultCertificateTransparency

static CertificateTransparency newDefaultCertificateTransparency()

serverNamePermitted

static boolean serverNamePermitted(SSLParametersImpl parameters,
 String serverName)

androidSdkInt

private static int androidSdkInt()

Returns the Android SDK int if this is an Android platform, or 0 if it is not.

Returns:

the Android SDK int if this is an Android platform, or 0 if it is not

javaVersion

static int javaVersion()

javaVersion0

private static int javaVersion0()

majorVersionFromJavaSpecificationVersion

private static int majorVersionFromJavaSpecificationVersion()

majorVersion

private static int majorVersion(String javaSpecVersion)

getSystemClassLoader

private static ClassLoader getSystemClassLoader()

getDefaultHostnameVerifier

public static ConscryptHostnameVerifier getDefaultHostnameVerifier()

getMillisSinceBoot

static long getMillisSinceBoot()

getStatsLog

public static StatsLog getStatsLog()

getStatsSource

public static Source getStatsSource()

getUids

public static int[] getUids()

isJavaxCertificateSupported

public static boolean isJavaxCertificateSupported()

isTlsV1Deprecated

public static boolean isTlsV1Deprecated()

isTlsV1Filtered

public static boolean isTlsV1Filtered()

isTlsV1Supported

public static boolean isTlsV1Supported()

isPakeSupported

public static boolean isPakeSupported()

isSdkGreater

public static boolean isSdkGreater(int sdk)