org.bouncycastle.crypto.tls.SRPTlsServer Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of bcprov-debug-jdk15to18 Show documentation
Show all versions of bcprov-debug-jdk15to18 Show documentation
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.
package org.bouncycastle.crypto.tls;
import java.io.IOException;
import java.util.Hashtable;
/**
* @deprecated Migrate to the (D)TLS API in org.bouncycastle.tls (bctls jar).
*/
public class SRPTlsServer
extends AbstractTlsServer
{
protected TlsSRPIdentityManager srpIdentityManager;
protected byte[] srpIdentity = null;
protected TlsSRPLoginParameters loginParameters = null;
public SRPTlsServer(TlsSRPIdentityManager srpIdentityManager)
{
this(new DefaultTlsCipherFactory(), srpIdentityManager);
}
public SRPTlsServer(TlsCipherFactory cipherFactory, TlsSRPIdentityManager srpIdentityManager)
{
super(cipherFactory);
this.srpIdentityManager = srpIdentityManager;
}
protected TlsSignerCredentials getDSASignerCredentials()
throws IOException
{
throw new TlsFatalAlert(AlertDescription.internal_error);
}
protected TlsSignerCredentials getRSASignerCredentials()
throws IOException
{
throw new TlsFatalAlert(AlertDescription.internal_error);
}
protected int[] getCipherSuites()
{
return new int[]
{
CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
CipherSuite.TLS_SRP_SHA_WITH_AES_256_CBC_SHA,
CipherSuite.TLS_SRP_SHA_WITH_AES_128_CBC_SHA
};
}
public void processClientExtensions(Hashtable clientExtensions) throws IOException
{
super.processClientExtensions(clientExtensions);
this.srpIdentity = TlsSRPUtils.getSRPExtension(clientExtensions);
}
public int getSelectedCipherSuite() throws IOException
{
int cipherSuite = super.getSelectedCipherSuite();
if (TlsSRPUtils.isSRPCipherSuite(cipherSuite))
{
if (srpIdentity != null)
{
this.loginParameters = srpIdentityManager.getLoginParameters(srpIdentity);
}
if (loginParameters == null)
{
throw new TlsFatalAlert(AlertDescription.unknown_psk_identity);
}
}
return cipherSuite;
}
public TlsCredentials getCredentials() throws IOException
{
int keyExchangeAlgorithm = TlsUtils.getKeyExchangeAlgorithm(selectedCipherSuite);
switch (keyExchangeAlgorithm)
{
case KeyExchangeAlgorithm.SRP:
return null;
case KeyExchangeAlgorithm.SRP_DSS:
return getDSASignerCredentials();
case KeyExchangeAlgorithm.SRP_RSA:
return getRSASignerCredentials();
default:
/* Note: internal error here; selected a key exchange we don't implement! */
throw new TlsFatalAlert(AlertDescription.internal_error);
}
}
public TlsKeyExchange getKeyExchange()
throws IOException
{
int keyExchangeAlgorithm = TlsUtils.getKeyExchangeAlgorithm(selectedCipherSuite);
switch (keyExchangeAlgorithm)
{
case KeyExchangeAlgorithm.SRP:
case KeyExchangeAlgorithm.SRP_DSS:
case KeyExchangeAlgorithm.SRP_RSA:
return createSRPKeyExchange(keyExchangeAlgorithm);
default:
/*
* Note: internal error here; the TlsProtocol implementation verifies that the
* server-selected cipher suite was in the list of client-offered cipher suites, so if
* we now can't produce an implementation, we shouldn't have offered it!
*/
throw new TlsFatalAlert(AlertDescription.internal_error);
}
}
protected TlsKeyExchange createSRPKeyExchange(int keyExchange)
{
return new TlsSRPKeyExchange(keyExchange, supportedSignatureAlgorithms, srpIdentity, loginParameters);
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy