123 lines
4.2 KiB
Java
123 lines
4.2 KiB
Java
/*
|
|
* Copyright 2014 The Netty Project
|
|
*
|
|
* The Netty Project licenses this file to you under the Apache License,
|
|
* version 2.0 (the "License"); you may not use this file except in compliance
|
|
* with the License. You may obtain a copy of the License at:
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
* License for the specific language governing permissions and limitations
|
|
* under the License.
|
|
*/
|
|
|
|
package io.netty.handler.ssl;
|
|
|
|
import static io.netty.util.internal.ObjectUtil.checkNotNull;
|
|
import io.netty.handler.ssl.JdkApplicationProtocolNegotiator.ProtocolSelectionListener;
|
|
import io.netty.handler.ssl.JdkApplicationProtocolNegotiator.ProtocolSelector;
|
|
import io.netty.util.internal.PlatformDependent;
|
|
|
|
import java.util.LinkedHashSet;
|
|
import java.util.List;
|
|
|
|
import javax.net.ssl.SSLEngine;
|
|
import javax.net.ssl.SSLException;
|
|
|
|
import org.eclipse.jetty.npn.NextProtoNego;
|
|
import org.eclipse.jetty.npn.NextProtoNego.ClientProvider;
|
|
import org.eclipse.jetty.npn.NextProtoNego.ServerProvider;
|
|
|
|
final class JettyNpnSslEngine extends JdkSslEngine {
|
|
private static boolean available;
|
|
|
|
static boolean isAvailable() {
|
|
updateAvailability();
|
|
return available;
|
|
}
|
|
|
|
private static void updateAvailability() {
|
|
if (available) {
|
|
return;
|
|
}
|
|
try {
|
|
// Always use bootstrap class loader.
|
|
Class.forName("sun.security.ssl.NextProtoNegoExtension", true, null);
|
|
available = true;
|
|
} catch (Exception ignore) {
|
|
// npn-boot was not loaded.
|
|
}
|
|
}
|
|
|
|
JettyNpnSslEngine(SSLEngine engine, final JdkApplicationProtocolNegotiator applicationNegotiator, boolean server) {
|
|
super(engine);
|
|
checkNotNull(applicationNegotiator, "applicationNegotiator");
|
|
|
|
if (server) {
|
|
final ProtocolSelectionListener protocolListener = checkNotNull(applicationNegotiator
|
|
.protocolListenerFactory().newListener(this, applicationNegotiator.protocols()),
|
|
"protocolListener");
|
|
NextProtoNego.put(engine, new ServerProvider() {
|
|
@Override
|
|
public void unsupported() {
|
|
protocolListener.unsupported();
|
|
}
|
|
|
|
@Override
|
|
public List<String> protocols() {
|
|
return applicationNegotiator.protocols();
|
|
}
|
|
|
|
@Override
|
|
public void protocolSelected(String protocol) {
|
|
try {
|
|
protocolListener.selected(protocol);
|
|
} catch (Throwable t) {
|
|
PlatformDependent.throwException(t);
|
|
}
|
|
}
|
|
});
|
|
} else {
|
|
final ProtocolSelector protocolSelector = checkNotNull(applicationNegotiator.protocolSelectorFactory()
|
|
.newSelector(this, new LinkedHashSet<>(applicationNegotiator.protocols())),
|
|
"protocolSelector");
|
|
NextProtoNego.put(engine, new ClientProvider() {
|
|
@Override
|
|
public boolean supports() {
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public void unsupported() {
|
|
protocolSelector.unsupported();
|
|
}
|
|
|
|
@Override
|
|
public String selectProtocol(List<String> protocols) {
|
|
try {
|
|
return protocolSelector.select(protocols);
|
|
} catch (Throwable t) {
|
|
PlatformDependent.throwException(t);
|
|
return null;
|
|
}
|
|
}
|
|
});
|
|
}
|
|
}
|
|
|
|
@Override
|
|
public void closeInbound() throws SSLException {
|
|
NextProtoNego.remove(getWrappedEngine());
|
|
super.closeInbound();
|
|
}
|
|
|
|
@Override
|
|
public void closeOutbound() {
|
|
NextProtoNego.remove(getWrappedEngine());
|
|
super.closeOutbound();
|
|
}
|
|
}
|