sslfilter.html

MINA+API 关于MINA的API

<a name="483" href="#483">483</a>                     <em class="jxr_comment">// the failedRequests were full with close notify; bail out.</em>
<a name="484" href="#484">484</a>                     <strong class="jxr_keyword">return</strong>;
<a name="485" href="#485">485</a>                 }
<a name="486" href="#486">486</a>                 
<a name="487" href="#487">487</a>                 cause = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/mina/common/WriteToClosedSessionException.html">WriteToClosedSessionException</a>(
<a name="488" href="#488">488</a>                         newFailedRequests, cause.getMessage(), cause.getCause());
<a name="489" href="#489">489</a>             }
<a name="490" href="#490">490</a>         }
<a name="491" href="#491">491</a>         
<a name="492" href="#492">492</a>         nextFilter.exceptionCaught(session, cause);
<a name="493" href="#493">493</a>     }
<a name="494" href="#494">494</a>         
<a name="495" href="#495">495</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">boolean</strong> isCloseNotify(Object message) {
<a name="496" href="#496">496</a>         <strong class="jxr_keyword">if</strong> (!(message instanceof IoBuffer)) {
<a name="497" href="#497">497</a>             <strong class="jxr_keyword">return</strong> false;
<a name="498" href="#498">498</a>         }
<a name="499" href="#499">499</a>         
<a name="500" href="#500">500</a>         <a href="../../../../../org/apache/mina/common/IoBuffer.html">IoBuffer</a> buf = (IoBuffer) message;
<a name="501" href="#501">501</a>         <strong class="jxr_keyword">int</strong> offset = buf.position();
<a name="502" href="#502">502</a>         <strong class="jxr_keyword">return</strong> buf.remaining() == 23 &amp;&amp;
<a name="503" href="#503">503</a>                buf.get(offset + 0) == 0x15 &amp;&amp; buf.get(offset + 1) == 0x03 &amp;&amp;
<a name="504" href="#504">504</a>                buf.get(offset + 2) == 0x01 &amp;&amp; buf.get(offset + 3) == 0x00 &amp;&amp;
<a name="505" href="#505">505</a>                buf.get(offset + 4) == 0x12;
<a name="506" href="#506">506</a>     }
<a name="507" href="#507">507</a> 
<a name="508" href="#508">508</a>     @Override
<a name="509" href="#509">509</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> filterWrite(<a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter, <a href="../../../../../org/apache/mina/common/IoSession.html">IoSession</a> session,
<a name="510" href="#510">510</a>             <a href="../../../../../org/apache/mina/common/WriteRequest.html">WriteRequest</a> writeRequest) <strong class="jxr_keyword">throws</strong> SSLException {
<a name="511" href="#511">511</a>         <strong class="jxr_keyword">boolean</strong> needsFlush = <strong class="jxr_keyword">true</strong>;
<a name="512" href="#512">512</a>         <a href="../../../../../org/apache/mina/filter/ssl/SslHandler.html">SslHandler</a> handler = getSslSessionHandler(session);
<a name="513" href="#513">513</a>         <strong class="jxr_keyword">synchronized</strong> (handler) {
<a name="514" href="#514">514</a>             <strong class="jxr_keyword">if</strong> (!isSslStarted(session)) {
<a name="515" href="#515">515</a>                 handler.scheduleFilterWrite(nextFilter,
<a name="516" href="#516">516</a>                         writeRequest);
<a name="517" href="#517">517</a>             }
<a name="518" href="#518">518</a>             <em class="jxr_comment">// Don't encrypt the data if encryption is disabled.</em>
<a name="519" href="#519">519</a>             <strong class="jxr_keyword">else</strong> <strong class="jxr_keyword">if</strong> (session.containsAttribute(DISABLE_ENCRYPTION_ONCE)) {
<a name="520" href="#520">520</a>                 <em class="jxr_comment">// Remove the marker attribute because it is temporary.</em>
<a name="521" href="#521">521</a>                 session.removeAttribute(DISABLE_ENCRYPTION_ONCE);
<a name="522" href="#522">522</a>                 handler.scheduleFilterWrite(nextFilter,
<a name="523" href="#523">523</a>                         writeRequest);
<a name="524" href="#524">524</a>             } <strong class="jxr_keyword">else</strong> {
<a name="525" href="#525">525</a>                 <em class="jxr_comment">// Otherwise, encrypt the buffer.</em>
<a name="526" href="#526">526</a>                 <a href="../../../../../org/apache/mina/common/IoBuffer.html">IoBuffer</a> buf = (IoBuffer) writeRequest.getMessage();
<a name="527" href="#527">527</a> 
<a name="528" href="#528">528</a>                 <strong class="jxr_keyword">if</strong> (handler.isWritingEncryptedData()) {
<a name="529" href="#529">529</a>                     <em class="jxr_comment">// data already encrypted; simply return buffer</em>
<a name="530" href="#530">530</a>                     handler.scheduleFilterWrite(nextFilter, writeRequest);
<a name="531" href="#531">531</a>                 } <strong class="jxr_keyword">else</strong> <strong class="jxr_keyword">if</strong> (handler.isHandshakeComplete()) {
<a name="532" href="#532">532</a>                     <em class="jxr_comment">// SSL encrypt</em>
<a name="533" href="#533">533</a>                     <strong class="jxr_keyword">int</strong> pos = buf.position();
<a name="534" href="#534">534</a>                     handler.encrypt(buf.buf());
<a name="535" href="#535">535</a>                     buf.position(pos);
<a name="536" href="#536">536</a>                     <a href="../../../../../org/apache/mina/common/IoBuffer.html">IoBuffer</a> encryptedBuffer = handler.fetchOutNetBuffer();
<a name="537" href="#537">537</a>                     handler.scheduleFilterWrite(
<a name="538" href="#538">538</a>                             nextFilter,
<a name="539" href="#539">539</a>                             <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/mina/filter/ssl/SslFilter.html">EncryptedWriteRequest</a>(
<a name="540" href="#540">540</a>                                     writeRequest, encryptedBuffer));
<a name="541" href="#541">541</a>                 } <strong class="jxr_keyword">else</strong> {
<a name="542" href="#542">542</a>                     <strong class="jxr_keyword">if</strong> (session.isConnected()) {
<a name="543" href="#543">543</a>                         <em class="jxr_comment">// Handshake not complete yet.</em>
<a name="544" href="#544">544</a>                         handler.schedulePreHandshakeWriteRequest(nextFilter,
<a name="545" href="#545">545</a>                                 writeRequest);
<a name="546" href="#546">546</a>                     }
<a name="547" href="#547">547</a>                     needsFlush = false;
<a name="548" href="#548">548</a>                 }
<a name="549" href="#549">549</a>             }
<a name="550" href="#550">550</a>         }
<a name="551" href="#551">551</a> 
<a name="552" href="#552">552</a>         <strong class="jxr_keyword">if</strong> (needsFlush) {
<a name="553" href="#553">553</a>             handler.flushScheduledEvents();
<a name="554" href="#554">554</a>         }
<a name="555" href="#555">555</a>     }
<a name="556" href="#556">556</a> 
<a name="557" href="#557">557</a>     @Override
<a name="558" href="#558">558</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> filterClose(<strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter, <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/mina/common/IoSession.html">IoSession</a> session)
<a name="559" href="#559">559</a>             <strong class="jxr_keyword">throws</strong> SSLException {
<a name="560" href="#560">560</a>         <a href="../../../../../org/apache/mina/filter/ssl/SslHandler.html">SslHandler</a> handler = getSslSessionHandler0(session);
<a name="561" href="#561">561</a>         <strong class="jxr_keyword">if</strong> (handler == <strong class="jxr_keyword">null</strong>) {
<a name="562" href="#562">562</a>             <em class="jxr_comment">// The connection might already have closed, or</em>
<a name="563" href="#563">563</a>             <em class="jxr_comment">// SSL might have not started yet.</em>
<a name="564" href="#564">564</a>             nextFilter.filterClose(session);
<a name="565" href="#565">565</a>             <strong class="jxr_keyword">return</strong>;
<a name="566" href="#566">566</a>         }
<a name="567" href="#567">567</a> 
<a name="568" href="#568">568</a>         <a href="../../../../../org/apache/mina/common/WriteFuture.html">WriteFuture</a> future = <strong class="jxr_keyword">null</strong>;
<a name="569" href="#569">569</a>         <strong class="jxr_keyword">try</strong> {
<a name="570" href="#570">570</a>             <strong class="jxr_keyword">synchronized</strong> (handler) {
<a name="571" href="#571">571</a>                 <strong class="jxr_keyword">if</strong> (isSslStarted(session)) {
<a name="572" href="#572">572</a>                     future = initiateClosure(nextFilter, session);
<a name="573" href="#573">573</a>                     future.addListener(<strong class="jxr_keyword">new</strong> IoFutureListener&lt;IoFuture&gt;() {
<a name="574" href="#574">574</a>                         <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> operationComplete(<a href="../../../../../org/apache/mina/common/IoFuture.html">IoFuture</a> future) {
<a name="575" href="#575">575</a>                             nextFilter.filterClose(session);
<a name="576" href="#576">576</a>                         }
<a name="577" href="#577">577</a>                     });
<a name="578" href="#578">578</a>                 }
<a name="579" href="#579">579</a>             }
<a name="580" href="#580">580</a> 
<a name="581" href="#581">581</a>             handler.flushScheduledEvents();
<a name="582" href="#582">582</a>         } <strong class="jxr_keyword">finally</strong> {
<a name="583" href="#583">583</a>             <strong class="jxr_keyword">if</strong> (future == <strong class="jxr_keyword">null</strong>) {
<a name="584" href="#584">584</a>                 nextFilter.filterClose(session);
<a name="585" href="#585">585</a>             }
<a name="586" href="#586">586</a>         }
<a name="587" href="#587">587</a>     }
<a name="588" href="#588">588</a> 
<a name="589" href="#589">589</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> initiateHandshake(<a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter, <a href="../../../../../org/apache/mina/common/IoSession.html">IoSession</a> session)
<a name="590" href="#590">590</a>             <strong class="jxr_keyword">throws</strong> SSLException {
<a name="591" href="#591">591</a>         <a href="../../../../../org/apache/mina/filter/ssl/SslHandler.html">SslHandler</a> handler = getSslSessionHandler(session);
<a name="592" href="#592">592</a>         <strong class="jxr_keyword">synchronized</strong> (handler) {
<a name="593" href="#593">593</a>             handler.handshake(nextFilter);
<a name="594" href="#594">594</a>         }
<a name="595" href="#595">595</a>         handler.flushScheduledEvents();
<a name="596" href="#596">596</a>     }
<a name="597" href="#597">597</a> 
<a name="598" href="#598">598</a>     <strong class="jxr_keyword">private</strong> <a href="../../../../../org/apache/mina/common/WriteFuture.html">WriteFuture</a> initiateClosure(<a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter, <a href="../../../../../org/apache/mina/common/IoSession.html">IoSession</a> session)
<a name="599" href="#599">599</a>             <strong class="jxr_keyword">throws</strong> SSLException {
<a name="600" href="#600">600</a>         <a href="../../../../../org/apache/mina/filter/ssl/SslHandler.html">SslHandler</a> handler = getSslSessionHandler(session);
<a name="601" href="#601">601</a>         <em class="jxr_comment">// if already shut down</em>
<a name="602" href="#602">602</a>