sslhandler.html

MINA+API 关于MINA的API

<a name="535" href="#535">535</a>                 } <strong class="jxr_keyword">catch</strong> (SSLException ssle) {
<a name="536" href="#536">536</a>                     SSLException newSsle = <strong class="jxr_keyword">new</strong> SSLHandshakeException(
<a name="537" href="#537">537</a>                             <span class="jxr_string">"SSL handshake failed."</span>);
<a name="538" href="#538">538</a>                     newSsle.initCause(ssle);
<a name="539" href="#539">539</a>                     <strong class="jxr_keyword">throw</strong> newSsle;
<a name="540" href="#540">540</a>                 }
<a name="541" href="#541">541</a>                 
<a name="542" href="#542">542</a>                 <a href="../../../../../org/apache/mina/common/IoBuffer.html">IoBuffer</a> outNetBuffer = fetchOutNetBuffer();
<a name="543" href="#543">543</a>                 <strong class="jxr_keyword">if</strong> (outNetBuffer != <strong class="jxr_keyword">null</strong> &amp;&amp; outNetBuffer.hasRemaining()) {
<a name="544" href="#544">544</a>                     writeFuture = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/mina/common/DefaultWriteFuture.html">DefaultWriteFuture</a>(session);
<a name="545" href="#545">545</a>                     parent.filterWrite(nextFilter, session,
<a name="546" href="#546">546</a>                             <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/mina/common/DefaultWriteRequest.html">DefaultWriteRequest</a>(outNetBuffer, writeFuture));
<a name="547" href="#547">547</a>                 }
<a name="548" href="#548">548</a>             }
<a name="549" href="#549">549</a>         } <strong class="jxr_keyword">finally</strong> {
<a name="550" href="#550">550</a>             writingEncryptedData = false;
<a name="551" href="#551">551</a>         }
<a name="552" href="#552">552</a> 
<a name="553" href="#553">553</a>         <strong class="jxr_keyword">return</strong> writeFuture;
<a name="554" href="#554">554</a>     }
<a name="555" href="#555">555</a> 
<a name="556" href="#556">556</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> unwrap(<a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter) <strong class="jxr_keyword">throws</strong> SSLException {
<a name="557" href="#557">557</a>         <em class="jxr_comment">// Prepare the net data for reading.</em>
<a name="558" href="#558">558</a>         <strong class="jxr_keyword">if</strong> (inNetBuffer != <strong class="jxr_keyword">null</strong>) {
<a name="559" href="#559">559</a>             inNetBuffer.flip();
<a name="560" href="#560">560</a>         }
<a name="561" href="#561">561</a> 
<a name="562" href="#562">562</a>         <strong class="jxr_keyword">if</strong> (inNetBuffer == <strong class="jxr_keyword">null</strong> || !inNetBuffer.hasRemaining()) {
<a name="563" href="#563">563</a>             <strong class="jxr_keyword">return</strong>;
<a name="564" href="#564">564</a>         }
<a name="565" href="#565">565</a> 
<a name="566" href="#566">566</a>         SSLEngineResult res = unwrap0();
<a name="567" href="#567">567</a> 
<a name="568" href="#568">568</a>         <em class="jxr_comment">// prepare to be written again</em>
<a name="569" href="#569">569</a>         <strong class="jxr_keyword">if</strong> (inNetBuffer.hasRemaining()) {
<a name="570" href="#570">570</a>             inNetBuffer.compact();
<a name="571" href="#571">571</a>         } <strong class="jxr_keyword">else</strong> {
<a name="572" href="#572">572</a>             inNetBuffer = <strong class="jxr_keyword">null</strong>;
<a name="573" href="#573">573</a>         }
<a name="574" href="#574">574</a> 
<a name="575" href="#575">575</a>         checkStatus(res);
<a name="576" href="#576">576</a> 
<a name="577" href="#577">577</a>         renegotiateIfNeeded(nextFilter, res);
<a name="578" href="#578">578</a>     }
<a name="579" href="#579">579</a> 
<a name="580" href="#580">580</a>     <strong class="jxr_keyword">private</strong> SSLEngineResult.Status unwrapHandshake(<a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter) <strong class="jxr_keyword">throws</strong> SSLException {
<a name="581" href="#581">581</a>         <em class="jxr_comment">// Prepare the net data for reading.</em>
<a name="582" href="#582">582</a>         <strong class="jxr_keyword">if</strong> (inNetBuffer != <strong class="jxr_keyword">null</strong>) {
<a name="583" href="#583">583</a>             inNetBuffer.flip();
<a name="584" href="#584">584</a>         }
<a name="585" href="#585">585</a>         
<a name="586" href="#586">586</a>         <strong class="jxr_keyword">if</strong> (inNetBuffer == <strong class="jxr_keyword">null</strong> || !inNetBuffer.hasRemaining()) {
<a name="587" href="#587">587</a>             <em class="jxr_comment">// Need more data.</em>
<a name="588" href="#588">588</a>             <strong class="jxr_keyword">return</strong> SSLEngineResult.Status.BUFFER_UNDERFLOW;
<a name="589" href="#589">589</a>         }
<a name="590" href="#590">590</a> 
<a name="591" href="#591">591</a>         SSLEngineResult res = unwrap0();
<a name="592" href="#592">592</a>         handshakeStatus = res.getHandshakeStatus();
<a name="593" href="#593">593</a> 
<a name="594" href="#594">594</a>         checkStatus(res);
<a name="595" href="#595">595</a> 
<a name="596" href="#596">596</a>         <em class="jxr_comment">// If handshake finished, no data was produced, and the status is still ok,</em>
<a name="597" href="#597">597</a>         <em class="jxr_comment">// try to unwrap more</em>
<a name="598" href="#598">598</a>         <strong class="jxr_keyword">if</strong> (handshakeStatus == SSLEngineResult.HandshakeStatus.FINISHED
<a name="599" href="#599">599</a>                 &amp;&amp; res.getStatus() == SSLEngineResult.Status.OK
<a name="600" href="#600">600</a>                 &amp;&amp; inNetBuffer.hasRemaining()) {
<a name="601" href="#601">601</a>             res = unwrap0();
<a name="602" href="#602">602</a> 
<a name="603" href="#603">603</a>             <em class="jxr_comment">// prepare to be written again</em>
<a name="604" href="#604">604</a>             <strong class="jxr_keyword">if</strong> (inNetBuffer.hasRemaining()) {
<a name="605" href="#605">605</a>                 inNetBuffer.compact();
<a name="606" href="#606">606</a>             } <strong class="jxr_keyword">else</strong> {
<a name="607" href="#607">607</a>                 inNetBuffer = <strong class="jxr_keyword">null</strong>;
<a name="608" href="#608">608</a>             }
<a name="609" href="#609">609</a> 
<a name="610" href="#610">610</a>             renegotiateIfNeeded(nextFilter, res);
<a name="611" href="#611">611</a>         } <strong class="jxr_keyword">else</strong> {
<a name="612" href="#612">612</a>             <em class="jxr_comment">// prepare to be written again</em>
<a name="613" href="#613">613</a>             <strong class="jxr_keyword">if</strong> (inNetBuffer.hasRemaining()) {
<a name="614" href="#614">614</a>                 inNetBuffer.compact();
<a name="615" href="#615">615</a>             } <strong class="jxr_keyword">else</strong> {
<a name="616" href="#616">616</a>                 inNetBuffer = <strong class="jxr_keyword">null</strong>;
<a name="617" href="#617">617</a>             }
<a name="618" href="#618">618</a>         }
<a name="619" href="#619">619</a> 
<a name="620" href="#620">620</a>         <strong class="jxr_keyword">return</strong> res.getStatus();
<a name="621" href="#621">621</a>     }
<a name="622" href="#622">622</a> 
<a name="623" href="#623">623</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> renegotiateIfNeeded(<a href="../../../../../org/apache/mina/common/IoFilter.html">NextFilter</a> nextFilter, SSLEngineResult res)
<a name="624" href="#624">624</a>             <strong class="jxr_keyword">throws</strong> SSLException {
<a name="625" href="#625">625</a>         <strong class="jxr_keyword">if</strong> (res.getStatus() != SSLEngineResult.Status.CLOSED
<a name="626" href="#626">626</a>                 &amp;&amp; res.getStatus() != SSLEngineResult.Status.BUFFER_UNDERFLOW
<a name="627" href="#627">627</a>                 &amp;&amp; res.getHandshakeStatus() != SSLEngineResult.HandshakeStatus.NOT_HANDSHAKING) {
<a name="628" href="#628">628</a>             <em class="jxr_comment">// Renegotiation required.</em>
<a name="629" href="#629">629</a>             handshakeComplete = false;
<a name="630" href="#630">630</a>             handshakeStatus = res.getHandshakeStatus();
<a name="631" href="#631">631</a>             handshake(nextFilter);
<a name="632" href="#632">632</a>         }
<a name="633" href="#633">633</a>     }
<a name="634" href="#634">634</a> 
<a name="635" href="#635">635</a>     <strong class="jxr_keyword">private</strong> SSLEngineResult unwrap0() <strong class="jxr_keyword">throws</strong> SSLException {
<a name="636" href="#636">636</a>         <strong class="jxr_keyword">if</strong> (appBuffer == <strong class="jxr_keyword">null</strong>) {
<a name="637" href="#637">637</a>             appBuffer = IoBuffer.allocate(inNetBuffer.remaining());
<a name="638" href="#638">638</a>         } <strong class="jxr_keyword">else</strong> {
<a name="639" href="#639">639</a>             appBuffer.expand(inNetBuffer.remaining());
<a name="640" href="#640">640</a>         }
<a name="641" href="#641">641</a>         
<a name="642" href="#642">642</a>         SSLEngineResult res;
<a name="643" href="#643">643</a>         <strong class="jxr_keyword">do</strong> {
<a name="644" href="#644">644</a>             res = sslEngine.unwrap(inNetBuffer.buf(), appBuffer.buf());
<a name="645" href="#645">645</a>             <strong class="jxr_keyword">if</strong> (res.getStatus() == SSLEngineResult.Status.BUFFER_OVERFLOW) {
<a name="646" href="#646">646</a>                 appBuffer.capacity(appBuffer.capacity() &lt;&lt; 1);
<a name="647" href="#647">647</a>                 appBuffer.limit(appBuffer.capacity());
<a name="648" href="#648">648</a>                 <strong class="jxr_keyword">continue</strong>;
<a name="649" href="#649">649</a>             }
<a name="650" href="#650">650</a>         } <strong class="jxr_keyword">while</strong> ((res.getStatus() == SSLEngineResult.Status.OK || res.getStatus() == SSLEngineResult.Status.BUFFER_OVERFLOW) &amp;&amp;
<a name="651" href="#651">651</a>                  (handshakeComplete &amp;&amp; res.getHandshakeStatus() == SSLEngineResult.HandshakeStatus.NOT_HANDSHAKING ||
<a name="652" href="#652">652</a>                   res.getHandshakeStatus() == SSLEngineResult.HandshakeStatus.NEED_UNWRAP));
<a name="653" href="#653">653</a> 
<a name="654" href="#654">654</a>         <strong class="jxr_keyword">return</strong> res;
<a name="655" href="#655">655</a>     }
<a name="656" href="#656">656</a> 
<a name="657" href="#657">657</a>     <em class="jxr_javadoccomment">/**</em>
<a name="658" href="#658">658</a> <em class="jxr_javadoccomment">     * Do all the outstanding handshake tasks in the current Thread.</em>
<a name="659" href="#659">659</a> <em class="jxr_javadoccomment">     */</em>
<a name="660" href="#660">660</a>     <strong class="jxr_keyword">private</strong> SSLEngineResult.HandshakeStatus doTasks() {
<a name="661" href="#661">661</a>         <em class="jxr_comment">/*</em>
<a name="662" href="#662">662</a> <em class="jxr_comment">         * We could run this in a separate thread, but I don't see the need</em>
<a name="663" href="#663">663</a> <em class="jxr_comment">         * for this when used from SSLFilter. Use thread filters in MINA instead?</em>
<a name="664" href="#664">664</a> <em class="jxr_comment">         */</em>
<a name="665" href="#665">665</a>         Runnable runnable;
<a name="666" href="#666">666</a>         <strong class="jxr_keyword">while</strong> ((runnable = sslEngine.getDelegatedTask()) != <strong class="jxr_keyword">null</strong>) {
<a name="66