com.sun.grizzly.util
Class SSLUtils

java.lang.Object
  com.sun.grizzly.util.SSLUtils

public class SSLUtils
extends java.lang.Object

SSL over NIO utility class. The class handle the SSLEngine operations needed to support SSL over NIO. TODO: Create an object that Wrap SSLEngine and its associated buffers.

Author:

Jeanfrancois Arcand

Field Summary

static int	DEFAULT_SSL_INACTIVITY_TIMEOUT The time to wait before timing out when reading bytes
protected static java.nio.ByteBuffer	hsBB
static int	MAX_BB_SIZE The maximum size a ByteBuffer can take.

Constructor Summary

SSLUtils()

Method Summary

static void	allocateThreadBuffers(int defaultBufferSize) Allocate the mandatory ByteBuffers.
static java.nio.ByteBuffer	doHandshake(java.nio.channels.SelectableChannel channel, java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, java.nio.ByteBuffer outputBB, javax.net.ssl.SSLEngine sslEngine, javax.net.ssl.SSLEngineResult.HandshakeStatus handshakeStatus) Perform an SSL handshake using the SSLEngine.
static java.nio.ByteBuffer	doHandshake(java.nio.channels.SelectableChannel channel, java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, java.nio.ByteBuffer outputBB, javax.net.ssl.SSLEngine sslEngine, javax.net.ssl.SSLEngineResult.HandshakeStatus handshakeStatus, int timeout) Perform an SSL handshake using the SSLEngine.
static java.nio.ByteBuffer	doHandshake(java.nio.channels.SelectableChannel channel, java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, java.nio.ByteBuffer outputBB, javax.net.ssl.SSLEngine sslEngine, javax.net.ssl.SSLEngineResult.HandshakeStatus handshakeStatus, int timeout, boolean useReadyBuffer) Perform an SSL handshake using the SSLEngine.
static java.lang.Object[]	doPeerCertificateChain(java.nio.channels.SelectableChannel channel, java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, java.nio.ByteBuffer outputBB, javax.net.ssl.SSLEngine sslEngine, boolean needClientAuth, int timeout) Get the peer certificate list by initiating a new handshake.
static Utils.Result	doRead(java.nio.channels.SelectableChannel channel, java.nio.ByteBuffer inputBB, javax.net.ssl.SSLEngine sslEngine, int timeout) Read encrypted bytes using anSSLEngine.
static Utils.Result	doSecureRead(java.nio.channels.SelectableChannel channel, javax.net.ssl.SSLEngine sslEngine, java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB) Read and decrypt bytes from the underlying SSL connections.
static Utils.Result	doSecureRead(java.nio.channels.SelectableChannel channel, javax.net.ssl.SSLEngine sslEngine, java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, int timeout) Read and decrypt bytes from the underlying SSL connections.
static javax.net.ssl.SSLEngineResult.HandshakeStatus	executeDelegatedTask(javax.net.ssl.SSLEngine sslEngine) Complete handshake operations.
static javax.net.ssl.SSLEngineResult	unwrap(java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, javax.net.ssl.SSLEngine sslEngine) Unwrap available encrypted bytes from inputBB to ByteBuffer using theSSLEngine
static java.nio.ByteBuffer	unwrapAll(java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer inputBB, javax.net.ssl.SSLEngine sslEngine) Unwrap all encrypted bytes from inputBB to ByteBuffer using theSSLEngine
static javax.net.ssl.SSLEngineResult	wrap(java.nio.ByteBuffer byteBuffer, java.nio.ByteBuffer outputBB, javax.net.ssl.SSLEngine sslEngine) Encrypt bytes.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

MAX_BB_SIZE

public static final int MAX_BB_SIZE

The maximum size a ByteBuffer can take.

See Also:

Constant Field Values

hsBB

protected static final java.nio.ByteBuffer hsBB

DEFAULT_SSL_INACTIVITY_TIMEOUT

public static final int DEFAULT_SSL_INACTIVITY_TIMEOUT

The time to wait before timing out when reading bytes

See Also:

Constant Field Values

Constructor Detail

SSLUtils

public SSLUtils()

Method Detail

doSecureRead

public static Utils.Result doSecureRead(java.nio.channels.SelectableChannel channel,
                                        javax.net.ssl.SSLEngine sslEngine,
                                        java.nio.ByteBuffer byteBuffer,
                                        java.nio.ByteBuffer inputBB)
                                 throws java.io.IOException

Read and decrypt bytes from the underlying SSL connections.

Parameters:

channel - underlying socket channel

sslEngine{@link - SSLEngine}

byteBuffer - buffer for application decrypted data

inputBB - buffer for reading encrypted data from socket

Returns:

number of bytes produced

Throws:

java.io.IOException

doSecureRead

public static Utils.Result doSecureRead(java.nio.channels.SelectableChannel channel,
                                        javax.net.ssl.SSLEngine sslEngine,
                                        java.nio.ByteBuffer byteBuffer,
                                        java.nio.ByteBuffer inputBB,
                                        int timeout)
                                 throws java.io.IOException

Read and decrypt bytes from the underlying SSL connections.

Parameters:

channel - underlying socket channel

sslEngine{@link - SSLEngine}

byteBuffer - buffer for application decrypted data

inputBB - buffer for reading encrypted data from socket

timeout - ssl inactivity timeout

Returns:

number of bytes produced

Throws:

java.io.IOException

doRead

public static Utils.Result doRead(java.nio.channels.SelectableChannel channel,
                                  java.nio.ByteBuffer inputBB,
                                  javax.net.ssl.SSLEngine sslEngine,
                                  int timeout)

Read encrypted bytes using anSSLEngine.

Parameters:

channel - The SelectableChannel

inputBB - The byteBuffer to store encrypted bytes

sslEngine - TheSSLEngine uses to manage the SSL operations.

timeout - The Selector.select() timeout value. A value of 0 will be executed as a Selector.selectNow();

Returns:

the bytes read.

unwrapAll

public static java.nio.ByteBuffer unwrapAll(java.nio.ByteBuffer byteBuffer,
                                            java.nio.ByteBuffer inputBB,
                                            javax.net.ssl.SSLEngine sslEngine)
                                     throws java.io.IOException

Unwrap all encrypted bytes from inputBB to ByteBuffer using theSSLEngine

Parameters:

byteBuffer - the decrypted ByteBuffer

inputBB - the encrypted ByteBuffer

sslEngine - The SSLEngine used to manage the SSL operations.

Returns:

the decrypted ByteBuffer

Throws:

java.io.IOException

unwrap

public static javax.net.ssl.SSLEngineResult unwrap(java.nio.ByteBuffer byteBuffer,
                                                   java.nio.ByteBuffer inputBB,
                                                   javax.net.ssl.SSLEngine sslEngine)
                                            throws java.io.IOException

Unwrap available encrypted bytes from inputBB to ByteBuffer using theSSLEngine

Parameters:

byteBuffer - the decrypted ByteBuffer

inputBB - the encrypted ByteBuffer

sslEngine - The SSLEngine used to manage the SSL operations.

Returns:

SSLEngineResult of the SSLEngine.unwrap operation.

Throws:

java.io.IOException

wrap

public static javax.net.ssl.SSLEngineResult wrap(java.nio.ByteBuffer byteBuffer,
                                                 java.nio.ByteBuffer outputBB,
                                                 javax.net.ssl.SSLEngine sslEngine)
                                          throws java.io.IOException

Encrypt bytes.

Parameters:

byteBuffer - the decrypted ByteBuffer

outputBB - the encrypted ByteBuffer

sslEngine - The SSLEngine used to manage the SSL operations.

Returns:

SSLEngineResult of the SSLEngine.wrap operation.

Throws:

java.io.IOException

executeDelegatedTask

public static javax.net.ssl.SSLEngineResult.HandshakeStatus executeDelegatedTask(javax.net.ssl.SSLEngine sslEngine)

Complete handshake operations.

Parameters:

sslEngine - The SSLEngine used to manage the SSL operations.

Returns:

SSLEngineResult.HandshakeStatus

doHandshake

public static java.nio.ByteBuffer doHandshake(java.nio.channels.SelectableChannel channel,
                                              java.nio.ByteBuffer byteBuffer,
                                              java.nio.ByteBuffer inputBB,
                                              java.nio.ByteBuffer outputBB,
                                              javax.net.ssl.SSLEngine sslEngine,
                                              javax.net.ssl.SSLEngineResult.HandshakeStatus handshakeStatus)
                                       throws java.io.IOException

Perform an SSL handshake using the SSLEngine. Note: If handshake was done successfully - outputBB will be cleared out, but this is *not* ready data to be written.

Parameters:

channel - the SelectableChannel

byteBuffer - The application ByteBuffer

inputBB - The encrypted input ByteBuffer

outputBB - The encrypted output ByteBuffer

sslEngine - The SSLEngine used.

handshakeStatus - The current handshake status

Returns:

byteBuffer the new ByteBuffer

Throws:

java.io.IOException

doHandshake

public static java.nio.ByteBuffer doHandshake(java.nio.channels.SelectableChannel channel,
                                              java.nio.ByteBuffer byteBuffer,
                                              java.nio.ByteBuffer inputBB,
                                              java.nio.ByteBuffer outputBB,
                                              javax.net.ssl.SSLEngine sslEngine,
                                              javax.net.ssl.SSLEngineResult.HandshakeStatus handshakeStatus,
                                              int timeout)
                                       throws java.io.IOException

Perform an SSL handshake using the SSLEngine. Note: If handshake was done successfully - outputBB will be cleared out, but this is *not* ready data to be written.

Parameters:

channel - the SelectableChannel

byteBuffer - The application ByteBuffer

inputBB - The encrypted input ByteBuffer

outputBB - The encrypted output ByteBuffer

sslEngine - The SSLEngine used.

handshakeStatus - The current handshake status

timeout -

Returns:

byteBuffer the new ByteBuffer

Throws:

java.io.IOException

java.io.IOException - if the handshake fail.

doHandshake

public static java.nio.ByteBuffer doHandshake(java.nio.channels.SelectableChannel channel,
                                              java.nio.ByteBuffer byteBuffer,
                                              java.nio.ByteBuffer inputBB,
                                              java.nio.ByteBuffer outputBB,
                                              javax.net.ssl.SSLEngine sslEngine,
                                              javax.net.ssl.SSLEngineResult.HandshakeStatus handshakeStatus,
                                              int timeout,
                                              boolean useReadyBuffer)
                                       throws java.io.IOException

Perform an SSL handshake using the SSLEngine. Note: If handshake was done successfully - outputBB will be cleared out, but this is *not* ready data to be written.

Parameters:

channel - the SelectableChannel

byteBuffer - The application ByteBuffer

inputBB - The encrypted input ByteBuffer

outputBB - The encrypted output ByteBuffer

sslEngine - The SSLEngine used.

handshakeStatus - The current handshake status

timeout -

useReadyBuffer - does method need to read data before UNWRAP or use a data from inputBB

Returns:

byteBuffer the new ByteBuffer

Throws:

java.io.IOException

java.io.IOException - if the handshake fail.

doPeerCertificateChain

public static java.lang.Object[] doPeerCertificateChain(java.nio.channels.SelectableChannel channel,
                                                        java.nio.ByteBuffer byteBuffer,
                                                        java.nio.ByteBuffer inputBB,
                                                        java.nio.ByteBuffer outputBB,
                                                        javax.net.ssl.SSLEngine sslEngine,
                                                        boolean needClientAuth,
                                                        int timeout)
                                                 throws java.io.IOException

Get the peer certificate list by initiating a new handshake.

Parameters:

channel - SelectableChannel

needClientAuth -

Returns:

Object[] An array of X509Certificate.

Throws:

java.io.IOException

allocateThreadBuffers

public static void allocateThreadBuffers(int defaultBufferSize)

Allocate the mandatory ByteBuffers. Since the ByteBuffer are maintained on the WorkerThread lazily, this method makes sure the ByteBuffers are properly allocated and configured.