cn.starboot.socket.plugins.ssl.SslService Maven / Gradle / Ivy
/*
* Copyright 2019 The aio-socket Project
*
* The aio-socket Project Licenses this file to you under the Apache License,
* Version 2.0 (the "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package cn.starboot.socket.plugins.ssl;
import cn.starboot.socket.utils.pool.memory.MemoryBlock;
import javax.net.ssl.*;
import java.nio.ByteBuffer;
import java.nio.channels.AsynchronousSocketChannel;
import java.nio.channels.CompletionHandler;
import java.util.function.Consumer;
/**
* TLS/SSL服务
* keytool -genkey -validity 36000 -alias www.mxd.xyz -keyalg RSA -keystore server.keystore
*
* @author MDong
* @version 2.10.1.v20211002-RELEASE
*/
public final class SslService {
private final SSLContext sslContext;
private final Consumer consumer;
private final CompletionHandler handshakeCompletionHandler = new CompletionHandler() {
@Override
public void completed(Integer result, HandshakeModel attachment) {
if (result == -1) {
attachment.setEof(true);
}
synchronized (attachment) {
doHandshake(attachment);
}
}
@Override
public void failed(Throwable exc, HandshakeModel attachment) {
attachment.setEof(true);
attachment.getHandshakeCallback().callback();
}
};
public SslService(SSLContext sslContext, Consumer consumer) {
this.sslContext = sslContext;
this.consumer = consumer;
}
HandshakeModel createSSLEngine(AsynchronousSocketChannel socketChannel, MemoryBlock memoryBlock) {
try {
HandshakeModel handshakeModel = new HandshakeModel();
SSLEngine sslEngine = sslContext.createSSLEngine();
SSLSession session = sslEngine.getSession();
//更新SSLEngine配置
consumer.accept(sslEngine);
handshakeModel.setSslEngine(sslEngine);
handshakeModel.setAppWriteBuffer(memoryBlock.allocate(session.getApplicationBufferSize()));
handshakeModel.setNetWriteBuffer(memoryBlock.allocate(session.getPacketBufferSize()));
handshakeModel.getNetWriteBuffer().buffer().flip();
handshakeModel.setAppReadBuffer(memoryBlock.allocate(session.getApplicationBufferSize()));
handshakeModel.setNetReadBuffer(memoryBlock.allocate(session.getPacketBufferSize()));
sslEngine.beginHandshake();
handshakeModel.setSocketChannel(socketChannel);
return handshakeModel;
} catch (Exception e) {
throw new RuntimeException(e);
}
}
/**
* 纯异步实现的SSL握手,
* 在执行doHandshake期间必须保证当前通道无数据读写正在执行。
* 若触发了数据读写，也应立马终止doHandshake方法
*
* @param handshakeModel .
*/
public void doHandshake(HandshakeModel handshakeModel) {
SSLEngineResult result;
try {
SSLEngineResult.HandshakeStatus handshakeStatus;
ByteBuffer netReadBuffer = handshakeModel.getNetReadBuffer().buffer();
ByteBuffer appReadBuffer = handshakeModel.getAppReadBuffer().buffer();
ByteBuffer netWriteBuffer = handshakeModel.getNetWriteBuffer().buffer();
ByteBuffer appWriteBuffer = handshakeModel.getAppWriteBuffer().buffer();
SSLEngine engine = handshakeModel.getSslEngine();
//握手阶段网络断链
if (handshakeModel.isEof()) {
handshakeModel.getHandshakeCallback().callback();
return;
}
while (!handshakeModel.isFinished()) {
handshakeStatus = engine.getHandshakeStatus();
switch (handshakeStatus) {
case NEED_UNWRAP:
//解码
netReadBuffer.flip();
if (netReadBuffer.hasRemaining()) {
result = engine.unwrap(netReadBuffer, appReadBuffer);
netReadBuffer.compact();
} else {
netReadBuffer.clear();
handshakeModel.getSocketChannel().read(netReadBuffer, handshakeModel, handshakeCompletionHandler);
return;
}
if (result.getHandshakeStatus() == SSLEngineResult.HandshakeStatus.FINISHED) {
handshakeModel.setFinished(true);
netReadBuffer.clear();
}
switch (result.getStatus()) {
case OK:
break;
case BUFFER_OVERFLOW:
System.out.println("doHandshake BUFFER_OVERFLOW");
break;
//两种情况会触发BUFFER_UNDERFLOW,1:读到的数据不够,2:netReadBuffer空间太小
case BUFFER_UNDERFLOW:
System.out.println("doHandshake BUFFER_UNDERFLOW");
return;
default:
throw new IllegalStateException("Invalid SSL status: " + result.getStatus());
}
break;
case NEED_WRAP:
if (netWriteBuffer.hasRemaining()) {
System.out.println("数据未输出完毕...");
handshakeModel.getSocketChannel().write(netWriteBuffer, handshakeModel, handshakeCompletionHandler);
return;
}
netWriteBuffer.clear();
result = engine.wrap(appWriteBuffer, netWriteBuffer);
switch (result.getStatus()) {
case OK:
appWriteBuffer.clear();
netWriteBuffer.flip();
if (result.getHandshakeStatus() == SSLEngineResult.HandshakeStatus.FINISHED) {
handshakeModel.setFinished(true);
}
handshakeModel.getSocketChannel().write(netWriteBuffer, handshakeModel, handshakeCompletionHandler);
return;
case BUFFER_OVERFLOW:
System.out.println("NEED_WRAP BUFFER_OVERFLOW");
break;
case BUFFER_UNDERFLOW:
throw new SSLException("Buffer underflow occured after a wrap. I don't think we should ever get here.");
case CLOSED:
System.out.println("closed");
try {
netWriteBuffer.flip();
netReadBuffer.clear();
} catch (Exception e) {
System.out.println("Failed to send server's CLOSE message due to socket channel's failure.");
}
break;
default:
throw new IllegalStateException("Invalid SSL status: " + result.getStatus());
}
break;
case NEED_TASK:
Runnable task;
while ((task = engine.getDelegatedTask()) != null) {
task.run();
}
break;
case FINISHED:
System.out.println("HandshakeFinished");
break;
case NOT_HANDSHAKING:
System.out.println("NOT_HANDSHAKING");
break;
default:
throw new IllegalStateException("Invalid SSL status: " + handshakeStatus);
}
}
handshakeModel.getHandshakeCallback().callback();
} catch (Exception e) {
System.err.println("ignore doHandshake exception: " + e.getMessage());
handshakeModel.setEof(true);
handshakeModel.getHandshakeCallback().callback();
}
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy