com.peersafe.base.crypto.X509CryptoSuite Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of chainsql Show documentation
ChainSQL JAVA API is an api for chainsql server
The newest version!
/*
Copyright (C) THL A29 Limited, a Tencent company. All rights reserved.

SPDX-License-Identifier: Apache-2.0
*/
package com.peersafe.base.crypto;

// import sun.security.util.CurveDB;
// import sun.security.ec.CurveDB;
import sun.security.util.ObjectIdentifier;
import sun.security.x509.AlgorithmId;

import java.lang.reflect.Field;
import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method;
import java.lang.reflect.Modifier;
import java.util.Arrays;
import java.util.Collections;
import java.util.HashMap;
import java.util.LinkedHashSet;
import java.util.Map;
import java.util.Set;
import java.util.regex.Pattern;

public class X509CryptoSuite {
    private static final String ALGORITHM_SM2_KEY = "SM3withSM2";
    private static final String CIPHER_GM = "ECDHE-SM2-WITH-SMS4-GCM-SM3";

    public static void enableX509CertificateWithGM() throws IllegalAccessException, InvocationTargetException,
            NoSuchFieldException, ClassNotFoundException{

        final String javaVer = System.getProperty("java.version");
        int javaSubVer = Integer.parseInt(javaVer.substring(javaVer.length()-3, javaVer.length()));
        ClassLoader classLoader = X509CryptoSuite.class.getClassLoader();
        Class CurveDB;
        if(javaVer.contains("1.6.0") || javaVer.contains("1.7.0") && javaSubVer < 231 ){
            throw new RuntimeException("jdk1.7 before 231 or jdk1.6 don't support.");
        } 
        if((javaVer.contains("1.7.0") && javaSubVer < 301 && javaSubVer > 231 ) ||
             (javaVer.contains("1.8.0") && javaSubVer < 292)) {
            CurveDB = classLoader.loadClass("sun.security.ec.CurveDB");
        } else{
            CurveDB = classLoader.loadClass("sun.security.util.CurveDB");
        }
        Method[] methods = CurveDB.getDeclaredMethods();
        Method method = null;
        Method getNamesByOID = null;
        boolean notSeted = true;

        Pattern splitPattern = Pattern.compile(",|\\[|\\]");
        for (Method m : methods) {
            if ("add".equals(m.getName())) {
                method = m;
            }
            if("getNamesByOID".equals(m.getName())) {
                getNamesByOID = m;
            }
        }
        if(getNamesByOID != null) {
            getNamesByOID.setAccessible(true);
            String[] nameArray = (String [])getNamesByOID.invoke(CurveDB, "1.2.156.10197.1.301");
            if(nameArray.length != 0)
            {
                notSeted = false;
            }
        }

        if(notSeted)
        {
            if (method == null) {
                throw new NoSuchFieldException();
            }
            method.setAccessible(true);
            method.invoke(CurveDB, "sm2p256v1", "1.2.156.10197.1.301", 1,
                    "FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFF",
                    "FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFC",
                    "28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93",
                    "32C4AE2C1F1981195F9904466A39C9948FE30BBFF2660BE1715A4589334C74C7",
                    "BC3736A2F4F6779C59BDCEE36B692153D0A9877CC62A474002DF32E52139F0A0",
                    "FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFF7203DF6B21C6052B53BBF40939D54123",
                    1, splitPattern);
    
            final Field specCollection = CurveDB.getDeclaredField("specCollection");
            final Field oidMap = CurveDB.getDeclaredField("oidMap");
            oidMap.setAccessible(true);
            specCollection.setAccessible(true);
            specCollection.set(CurveDB, Collections.unmodifiableCollection(((Map) oidMap.get(CurveDB)).values()));
    
            Field nameTable = AlgorithmId.class.getDeclaredField("nameTable");
            nameTable.setAccessible(true);
            Map map = (HashMap) nameTable.get(AlgorithmId.class);
            ObjectIdentifier objectIdentifier = ObjectIdentifier.newInternal(new int[]{1, 2, 156, 10197, 1, 501});
            map.put(objectIdentifier, ALGORITHM_SM2_KEY);
        } 

        Class clazz = Class.forName("io.netty.handler.ssl.ExtendedOpenSslSession");
        Field algorithmsField = clazz.getDeclaredField("LOCAL_SUPPORTED_SIGNATURE_ALGORITHMS");
        algorithmsField.setAccessible(true);
        Field modifiersField = Field.class.getDeclaredField("modifiers");
        modifiersField.setAccessible(true);
        modifiersField.setInt(algorithmsField, algorithmsField.getModifiers() & ~Modifier.FINAL);
        String[] algorithms = (String[]) algorithmsField.get(null);
        if(!Arrays.asList(algorithms).contains(ALGORITHM_SM2_KEY))
        {
            String[] newAlgorithms = new String[algorithms.length + 1];
            System.arraycopy(algorithms, 0, newAlgorithms, 0, algorithms.length);
            newAlgorithms[algorithms.length] = ALGORITHM_SM2_KEY;
            algorithmsField.set(null, newAlgorithms);
        }
        

        Class cipherClass = Class.forName("io.netty.handler.ssl.OpenSsl");
        Field cipherField = cipherClass.getDeclaredField("AVAILABLE_OPENSSL_CIPHER_SUITES");
        cipherField.setAccessible(true);
        Field modifiersCField = Field.class.getDeclaredField("modifiers");
        modifiersCField.setAccessible(true);
        modifiersCField.setInt(cipherField, cipherField.getModifiers() & ~Modifier.FINAL);
        Set ciphers = (Set) cipherField.get(null);
        if(!ciphers.contains(CIPHER_GM))
        {
            Set newCiphers = new LinkedHashSet();
            newCiphers.addAll(ciphers);
            newCiphers.add(CIPHER_GM);
            cipherField.set(null, newCiphers);
        }
    }
}