/*
* Copyright (c) 2003, 2012, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation. Oracle designates this
* particular file as subject to the "Classpath" exception as provided
* by Oracle in the LICENSE file that accompanied this code.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
package sun.security.timestamp;
import java.io.BufferedInputStream;
import java.io.DataOutputStream;
import java.io.EOFException;
import java.io.IOException;
import java.net.URI;
import java.net.URL;
import java.net.HttpURLConnection;
import java.util.*;
import sun.misc.IOUtils;
import sun.security.util.Debug;
A timestamper that communicates with a Timestamping Authority (TSA)
over HTTP.
It supports the Time-Stamp Protocol defined in:
RFC 3161.
Author: Vincent Ryan Since: 1.5
/**
* A timestamper that communicates with a Timestamping Authority (TSA)
* over HTTP.
* It supports the Time-Stamp Protocol defined in:
* <a href="http://www.ietf.org/rfc/rfc3161.txt">RFC 3161</a>.
*
* @since 1.5
* @author Vincent Ryan
*/
public class HttpTimestamper implements Timestamper {
private static final int CONNECT_TIMEOUT = 15000; // 15 seconds
// The MIME type for a timestamp query
private static final String TS_QUERY_MIME_TYPE =
"application/timestamp-query";
// The MIME type for a timestamp reply
private static final String TS_REPLY_MIME_TYPE =
"application/timestamp-reply";
private static final Debug debug = Debug.getInstance("ts");
/*
* HTTP URI identifying the location of the TSA
*/
private URI tsaURI = null;
Creates a timestamper that connects to the specified TSA.
Params: - tsa – The location of the TSA. It must be an HTTP or HTTPS URI.
Throws: - IllegalArgumentException – if tsaURI is not an HTTP or HTTPS URI
/**
* Creates a timestamper that connects to the specified TSA.
*
* @param tsa The location of the TSA. It must be an HTTP or HTTPS URI.
* @throws IllegalArgumentException if tsaURI is not an HTTP or HTTPS URI
*/
public HttpTimestamper(URI tsaURI) {
if (!tsaURI.getScheme().equalsIgnoreCase("http") &&
!tsaURI.getScheme().equalsIgnoreCase("https")) {
throw new IllegalArgumentException(
"TSA must be an HTTP or HTTPS URI");
}
this.tsaURI = tsaURI;
}
Connects to the TSA and requests a timestamp.
Params: - tsQuery – The timestamp query.
Throws: - IOException – The exception is thrown if a problem occurs while
communicating with the TSA.
Returns: The result of the timestamp query.
/**
* Connects to the TSA and requests a timestamp.
*
* @param tsQuery The timestamp query.
* @return The result of the timestamp query.
* @throws IOException The exception is thrown if a problem occurs while
* communicating with the TSA.
*/
public TSResponse generateTimestamp(TSRequest tsQuery) throws IOException {
HttpURLConnection connection =
(HttpURLConnection) tsaURI.toURL().openConnection();
connection.setDoOutput(true);
connection.setUseCaches(false); // ignore cache
connection.setRequestProperty("Content-Type", TS_QUERY_MIME_TYPE);
connection.setRequestMethod("POST");
// Avoids the "hang" when a proxy is required but none has been set.
connection.setConnectTimeout(CONNECT_TIMEOUT);
if (debug != null) {
Set<Map.Entry<String, List<String>>> headers =
connection.getRequestProperties().entrySet();
debug.println(connection.getRequestMethod() + " " + tsaURI +
" HTTP/1.1");
for (Map.Entry<String, List<String>> e : headers) {
debug.println(" " + e);
}
debug.println();
}
connection.connect(); // No HTTP authentication is performed
// Send the request
DataOutputStream output = null;
try {
output = new DataOutputStream(connection.getOutputStream());
byte[] request = tsQuery.encode();
output.write(request, 0, request.length);
output.flush();
if (debug != null) {
debug.println("sent timestamp query (length=" +
request.length + ")");
}
} finally {
if (output != null) {
output.close();
}
}
// Receive the reply
BufferedInputStream input = null;
byte[] replyBuffer = null;
try {
input = new BufferedInputStream(connection.getInputStream());
if (debug != null) {
String header = connection.getHeaderField(0);
debug.println(header);
int i = 1;
while ((header = connection.getHeaderField(i)) != null) {
String key = connection.getHeaderFieldKey(i);
debug.println(" " + ((key==null) ? "" : key + ": ") +
header);
i++;
}
debug.println();
}
verifyMimeType(connection.getContentType());
int clen = connection.getContentLength();
replyBuffer = IOUtils.readAllBytes(input);
if (clen != -1 && replyBuffer.length != clen)
throw new EOFException("Expected:" + clen +
", read:" + replyBuffer.length);
if (debug != null) {
debug.println("received timestamp response (length=" +
replyBuffer.length + ")");
}
} finally {
if (input != null) {
input.close();
}
}
return new TSResponse(replyBuffer);
}
/*
* Checks that the MIME content type is a timestamp reply.
*
* @param contentType The MIME content type to be checked.
* @throws IOException The exception is thrown if a mismatch occurs.
*/
private static void verifyMimeType(String contentType) throws IOException {
if (! TS_REPLY_MIME_TYPE.equalsIgnoreCase(contentType)) {
throw new IOException("MIME Content-Type is not " +
TS_REPLY_MIME_TYPE);
}
}
}