package org.glassfish.grizzly.ssl;
import org.glassfish.grizzly.Connection;
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.security.cert.CertificateFactory;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.net.ssl.SSLEngine;
import javax.net.ssl.SSLSession;
import javax.security.cert.X509Certificate;
import org.glassfish.grizzly.Grizzly;
public class SSLSupportImpl implements SSLSupport {
private static final Logger logger = Grizzly.logger(SSLSupportImpl.class);
private static final CipherData ciphers[] = {
new CipherData("_WITH_NULL_", 0),
new CipherData("_WITH_IDEA_CBC_", 128),
new CipherData("_WITH_RC2_CBC_40_", 40),
new CipherData("_WITH_RC4_40_", 40),
new CipherData("_WITH_RC4_128_", 128),
new CipherData("_WITH_DES40_CBC_", 40),
new CipherData("_WITH_DES_CBC_", 56),
new CipherData("_WITH_3DES_EDE_CBC_", 168),
new CipherData("_WITH_AES_128_", 128),
new CipherData("_WITH_AES_256_", 256)
};
public static final String KEY_SIZE_KEY = "SSL_KEY_SIZE";
private final SSLEngine engine;
private volatile SSLSession session;
public SSLSupportImpl(Connection connection) {
engine = SSLUtils.getSSLEngine(connection);
if (engine == null) {
throw new IllegalStateException("SSLEngine is null");
}
session = engine.getSession();
}
@Override
public String getCipherSuite() throws IOException {
if (session == null) {
return null;
}
return session.getCipherSuite();
}
@Override
public Object[] getPeerCertificateChain() throws IOException {
return getPeerCertificateChain(false);
}
protected java.security.cert.X509Certificate[] getX509Certificates(
SSLSession session) throws IOException {
X509Certificate jsseCerts[] = null;
try {
jsseCerts = session.getPeerCertificateChain();
} catch (Throwable ex) {
}
if (jsseCerts == null) {
jsseCerts = new X509Certificate[0];
}
java.security.cert.X509Certificate[] x509Certs =
new java.security.cert.X509Certificate[jsseCerts.length];
for (int i = 0; i < x509Certs.length; i++) {
try {
byte buffer[] = jsseCerts[i].getEncoded();
CertificateFactory cf =
CertificateFactory.getInstance("X.509");
ByteArrayInputStream stream =
new ByteArrayInputStream(buffer);
x509Certs[i] = (java.security.cert.X509Certificate) cf.generateCertificate(stream);
if (logger.isLoggable(Level.FINE)) {
logger.log(Level.FINE, "Cert #" + i + " = " + x509Certs[i]);
}
} catch (Exception ex) {
logger.log(Level.INFO, "Error translating " + jsseCerts[i], ex);
return null;
}
}
if (x509Certs.length < 1) {
return null;
}
return x509Certs;
}
@Override
public Object[] getPeerCertificateChain(boolean force)
throws IOException {
if (session == null) {
return null;
}
X509Certificate[] jsseCerts = null;
try {
jsseCerts = session.getPeerCertificateChain();
} catch (Exception bex) {
}
if (jsseCerts == null) {
jsseCerts = new X509Certificate[0];
}
if (jsseCerts.length <= 0 && force) {
session.invalidate();
session = engine.getSession();
}
return getX509Certificates(session);
}
@Override
public Integer getKeySize()
throws IOException {
SSLSupport.CipherData c_aux[] = ciphers;
if (session == null) {
return null;
}
Integer keySize = (Integer) session.getValue(KEY_SIZE_KEY);
if (keySize == null) {
int size = 0;
String cipherSuite = session.getCipherSuite();
for (int i = 0; i < c_aux.length; i++) {
if (cipherSuite.contains(c_aux[i].phrase)) {
size = c_aux[i].keySize;
break;
}
}
keySize = size;
session.putValue(KEY_SIZE_KEY, keySize);
}
return keySize;
}
@Override
public String getSessionId() throws IOException {
if (session == null) {
return null;
}
byte[] ssl_session = session.getId();
if (ssl_session == null) {
return null;
}
StringBuilder buf = new StringBuilder("");
for (int x = 0; x < ssl_session.length; x++) {
String digit = Integer.toHexString((int) ssl_session[x]);
if (digit.length() < 2) {
buf.append('0');
}
if (digit.length() > 2) {
digit = digit.substring(digit.length() - 2);
}
buf.append(digit);
}
return buf.toString();
}
}