mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-09-05 07:18:39 +09:00
pt 1 in reviving the android build (copied from pm 28a1, wish me luck)
This commit is contained in:
parent
efa9662725
commit
d7788a6d6d
4249 changed files with 468189 additions and 0 deletions
259
mobile/android/thirdparty/ch/boye/httpclientandroidlib/conn/ssl/SSLContextBuilder.java
vendored
Normal file
259
mobile/android/thirdparty/ch/boye/httpclientandroidlib/conn/ssl/SSLContextBuilder.java
vendored
Normal file
|
|
@ -0,0 +1,259 @@
|
|||
/*
|
||||
* ====================================================================
|
||||
* Licensed to the Apache Software Foundation (ASF) under one
|
||||
* or more contributor license agreements. See the NOTICE file
|
||||
* distributed with this work for additional information
|
||||
* regarding copyright ownership. The ASF licenses this file
|
||||
* to you under the Apache License, Version 2.0 (the
|
||||
* "License"); you may not use this file except in compliance
|
||||
* with the License. You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing,
|
||||
* software distributed under the License is distributed on an
|
||||
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
* KIND, either express or implied. See the License for the
|
||||
* specific language governing permissions and limitations
|
||||
* under the License.
|
||||
* ====================================================================
|
||||
*
|
||||
* This software consists of voluntary contributions made by many
|
||||
* individuals on behalf of the Apache Software Foundation. For more
|
||||
* information on the Apache Software Foundation, please see
|
||||
* <http://www.apache.org/>.
|
||||
*
|
||||
*/
|
||||
|
||||
package ch.boye.httpclientandroidlib.conn.ssl;
|
||||
|
||||
import java.net.Socket;
|
||||
import java.security.KeyManagementException;
|
||||
import java.security.KeyStore;
|
||||
import java.security.KeyStoreException;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.security.Principal;
|
||||
import java.security.PrivateKey;
|
||||
import java.security.SecureRandom;
|
||||
import java.security.UnrecoverableKeyException;
|
||||
import java.security.cert.CertificateException;
|
||||
import java.security.cert.X509Certificate;
|
||||
import java.util.HashMap;
|
||||
import java.util.HashSet;
|
||||
import java.util.Map;
|
||||
import java.util.Set;
|
||||
|
||||
import javax.net.ssl.KeyManager;
|
||||
import javax.net.ssl.KeyManagerFactory;
|
||||
import javax.net.ssl.SSLContext;
|
||||
import javax.net.ssl.TrustManager;
|
||||
import javax.net.ssl.TrustManagerFactory;
|
||||
import javax.net.ssl.X509KeyManager;
|
||||
import javax.net.ssl.X509TrustManager;
|
||||
|
||||
import ch.boye.httpclientandroidlib.annotation.NotThreadSafe;
|
||||
|
||||
/**
|
||||
* Builder for {@link SSLContext} instances.
|
||||
*
|
||||
* @since 4.3
|
||||
*/
|
||||
@NotThreadSafe
|
||||
public class SSLContextBuilder {
|
||||
|
||||
static final String TLS = "TLS";
|
||||
static final String SSL = "SSL";
|
||||
|
||||
private String protocol;
|
||||
private Set<KeyManager> keymanagers;
|
||||
private Set<TrustManager> trustmanagers;
|
||||
private SecureRandom secureRandom;
|
||||
|
||||
public SSLContextBuilder() {
|
||||
super();
|
||||
this.keymanagers = new HashSet<KeyManager>();
|
||||
this.trustmanagers = new HashSet<TrustManager>();
|
||||
}
|
||||
|
||||
public SSLContextBuilder useTLS() {
|
||||
this.protocol = TLS;
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContextBuilder useSSL() {
|
||||
this.protocol = SSL;
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContextBuilder useProtocol(final String protocol) {
|
||||
this.protocol = protocol;
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContextBuilder setSecureRandom(final SecureRandom secureRandom) {
|
||||
this.secureRandom = secureRandom;
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContextBuilder loadTrustMaterial(
|
||||
final KeyStore truststore,
|
||||
final TrustStrategy trustStrategy) throws NoSuchAlgorithmException, KeyStoreException {
|
||||
final TrustManagerFactory tmfactory = TrustManagerFactory.getInstance(
|
||||
TrustManagerFactory.getDefaultAlgorithm());
|
||||
tmfactory.init(truststore);
|
||||
final TrustManager[] tms = tmfactory.getTrustManagers();
|
||||
if (tms != null) {
|
||||
if (trustStrategy != null) {
|
||||
for (int i = 0; i < tms.length; i++) {
|
||||
final TrustManager tm = tms[i];
|
||||
if (tm instanceof X509TrustManager) {
|
||||
tms[i] = new TrustManagerDelegate(
|
||||
(X509TrustManager) tm, trustStrategy);
|
||||
}
|
||||
}
|
||||
}
|
||||
for (final TrustManager tm : tms) {
|
||||
this.trustmanagers.add(tm);
|
||||
}
|
||||
}
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContextBuilder loadTrustMaterial(
|
||||
final KeyStore truststore) throws NoSuchAlgorithmException, KeyStoreException {
|
||||
return loadTrustMaterial(truststore, null);
|
||||
}
|
||||
|
||||
public SSLContextBuilder loadKeyMaterial(
|
||||
final KeyStore keystore,
|
||||
final char[] keyPassword)
|
||||
throws NoSuchAlgorithmException, KeyStoreException, UnrecoverableKeyException {
|
||||
loadKeyMaterial(keystore, keyPassword, null);
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContextBuilder loadKeyMaterial(
|
||||
final KeyStore keystore,
|
||||
final char[] keyPassword,
|
||||
final PrivateKeyStrategy aliasStrategy)
|
||||
throws NoSuchAlgorithmException, KeyStoreException, UnrecoverableKeyException {
|
||||
final KeyManagerFactory kmfactory = KeyManagerFactory.getInstance(
|
||||
KeyManagerFactory.getDefaultAlgorithm());
|
||||
kmfactory.init(keystore, keyPassword);
|
||||
final KeyManager[] kms = kmfactory.getKeyManagers();
|
||||
if (kms != null) {
|
||||
if (aliasStrategy != null) {
|
||||
for (int i = 0; i < kms.length; i++) {
|
||||
final KeyManager km = kms[i];
|
||||
if (km instanceof X509KeyManager) {
|
||||
kms[i] = new KeyManagerDelegate(
|
||||
(X509KeyManager) km, aliasStrategy);
|
||||
}
|
||||
}
|
||||
}
|
||||
for (final KeyManager km : kms) {
|
||||
keymanagers.add(km);
|
||||
}
|
||||
}
|
||||
return this;
|
||||
}
|
||||
|
||||
public SSLContext build() throws NoSuchAlgorithmException, KeyManagementException {
|
||||
final SSLContext sslcontext = SSLContext.getInstance(
|
||||
this.protocol != null ? this.protocol : TLS);
|
||||
sslcontext.init(
|
||||
!keymanagers.isEmpty() ? keymanagers.toArray(new KeyManager[keymanagers.size()]) : null,
|
||||
!trustmanagers.isEmpty() ? trustmanagers.toArray(new TrustManager[trustmanagers.size()]) : null,
|
||||
secureRandom);
|
||||
return sslcontext;
|
||||
}
|
||||
|
||||
static class TrustManagerDelegate implements X509TrustManager {
|
||||
|
||||
private final X509TrustManager trustManager;
|
||||
private final TrustStrategy trustStrategy;
|
||||
|
||||
TrustManagerDelegate(final X509TrustManager trustManager, final TrustStrategy trustStrategy) {
|
||||
super();
|
||||
this.trustManager = trustManager;
|
||||
this.trustStrategy = trustStrategy;
|
||||
}
|
||||
|
||||
public void checkClientTrusted(
|
||||
final X509Certificate[] chain, final String authType) throws CertificateException {
|
||||
this.trustManager.checkClientTrusted(chain, authType);
|
||||
}
|
||||
|
||||
public void checkServerTrusted(
|
||||
final X509Certificate[] chain, final String authType) throws CertificateException {
|
||||
if (!this.trustStrategy.isTrusted(chain, authType)) {
|
||||
this.trustManager.checkServerTrusted(chain, authType);
|
||||
}
|
||||
}
|
||||
|
||||
public X509Certificate[] getAcceptedIssuers() {
|
||||
return this.trustManager.getAcceptedIssuers();
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
static class KeyManagerDelegate implements X509KeyManager {
|
||||
|
||||
private final X509KeyManager keyManager;
|
||||
private final PrivateKeyStrategy aliasStrategy;
|
||||
|
||||
KeyManagerDelegate(final X509KeyManager keyManager, final PrivateKeyStrategy aliasStrategy) {
|
||||
super();
|
||||
this.keyManager = keyManager;
|
||||
this.aliasStrategy = aliasStrategy;
|
||||
}
|
||||
|
||||
public String[] getClientAliases(
|
||||
final String keyType, final Principal[] issuers) {
|
||||
return this.keyManager.getClientAliases(keyType, issuers);
|
||||
}
|
||||
|
||||
public String chooseClientAlias(
|
||||
final String[] keyTypes, final Principal[] issuers, final Socket socket) {
|
||||
final Map<String, PrivateKeyDetails> validAliases = new HashMap<String, PrivateKeyDetails>();
|
||||
for (final String keyType: keyTypes) {
|
||||
final String[] aliases = this.keyManager.getClientAliases(keyType, issuers);
|
||||
if (aliases != null) {
|
||||
for (final String alias: aliases) {
|
||||
validAliases.put(alias,
|
||||
new PrivateKeyDetails(keyType, this.keyManager.getCertificateChain(alias)));
|
||||
}
|
||||
}
|
||||
}
|
||||
return this.aliasStrategy.chooseAlias(validAliases, socket);
|
||||
}
|
||||
|
||||
public String[] getServerAliases(
|
||||
final String keyType, final Principal[] issuers) {
|
||||
return this.keyManager.getServerAliases(keyType, issuers);
|
||||
}
|
||||
|
||||
public String chooseServerAlias(
|
||||
final String keyType, final Principal[] issuers, final Socket socket) {
|
||||
final Map<String, PrivateKeyDetails> validAliases = new HashMap<String, PrivateKeyDetails>();
|
||||
final String[] aliases = this.keyManager.getServerAliases(keyType, issuers);
|
||||
if (aliases != null) {
|
||||
for (final String alias: aliases) {
|
||||
validAliases.put(alias,
|
||||
new PrivateKeyDetails(keyType, this.keyManager.getCertificateChain(alias)));
|
||||
}
|
||||
}
|
||||
return this.aliasStrategy.chooseAlias(validAliases, socket);
|
||||
}
|
||||
|
||||
public X509Certificate[] getCertificateChain(final String alias) {
|
||||
return this.keyManager.getCertificateChain(alias);
|
||||
}
|
||||
|
||||
public PrivateKey getPrivateKey(final String alias) {
|
||||
return this.keyManager.getPrivateKey(alias);
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue