/* * Copyright (c) 1998-2015 Caucho Technology -- all rights reserved * * This file is part of Baratine(TM)(TM) * * Each copy or derived work must preserve the copyright notice and this * notice unmodified. * * Baratine is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * Baratine is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE, or any warranty * of NON-INFRINGEMENT. See the GNU General Public License for more * details. * * You should have received a copy of the GNU General Public License * along with Baratine; if not, write to the * Free Software Foundation, Inc. * 59 Temple Place, Suite 330 * Boston, MA 02111-1307 USA * * @author Scott Ferguson */ package com.caucho.v5.io; import java.io.IOException; import java.net.InetAddress; import java.net.InetSocketAddress; import java.net.Socket; import java.net.SocketException; import java.nio.channels.SelectableChannel; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import java.util.HashMap; import java.util.logging.Level; import java.util.logging.Logger; import javax.net.ssl.SSLPeerUnverifiedException; import javax.net.ssl.SSLSession; import javax.net.ssl.SSLSocket; import com.caucho.v5.util.ModulePrivate; /** * Abstract socket to handle both normal sockets and jni sockets. */ @ModulePrivate public class SocketWrapperBar extends SocketBar { private static final Logger log = Logger.getLogger(SocketWrapperBar.class.getName()); private static Class<?> _sslSocketClass; private static HashMap<String,Integer> _sslKeySizes; private Socket _s; private SocketStream _streamImpl; private boolean _isWriteClosed; public SocketWrapperBar() { } public SocketWrapperBar(Socket s) { init(s); } public void init(Socket s) { _s = s; } @Override public Socket getSocket() { return _s; } @Override public void setSocket(Socket s) { _s = s; } /** * Accepts a new socket. */ @Override public int acceptInitialRead(byte []buffer, int offset, int length) throws IOException { Socket socket = getSocket(); /* // XXX: if (isTcpNoDelay()) socket.setTcpNoDelay(true); if (isTcpKeepalive()) socket.setKeepAlive(true); if (_connectionSocketTimeout > 0) socket.setSoTimeout(_connectionSocketTimeout); */ return socket.getInputStream().read(buffer, offset, length); } /** * Sets the socket timeout. */ public void setReadTimeout(int ms) throws IOException { _s.setSoTimeout(ms); } @Override public void setSoTimeout(long ms) throws SocketException { _s.setSoTimeout((int) ms); } @Override public long getSoTimeout() { try { return _s.getSoTimeout(); } catch (SocketException e) { log.log(Level.FINEST, e.toString(), e); return -1; } } @Override public void tcpNoDelay(boolean isNoDelay) throws SocketException { _s.setTcpNoDelay(isNoDelay); } /** * Returns the server inet address that accepted the request. */ @Override public InetAddress addressLocal() { Socket s = getSocket(); if (s != null) { return s.getLocalAddress(); } else { return null; } } /** * Returns the server port that accepted the request. */ @Override public InetSocketAddress ipLocal() { Socket s = getSocket(); if (s != null) { return (InetSocketAddress) s.getLocalSocketAddress(); } else { return null; } } /** * Returns the server port that accepted the request. */ @Override public InetSocketAddress ipRemote() { Socket s = getSocket(); if (s != null) { return (InetSocketAddress) s.getRemoteSocketAddress(); } else { return null; } } /** * Returns the server port that accepted the request. */ @Override public int portLocal() { Socket s = getSocket(); if (s != null) { return s.getLocalPort(); } else { return -1; } } /** * Returns the remote client's inet address. */ @Override public InetAddress addressRemote() { if (_s != null) return _s.getInetAddress(); else return null; } /** * Returns the remote client's port. */ @Override public int portRemote() { if (_s != null) return _s.getPort(); else return 0; } /** * Returns true if the connection is secure. */ @Override public boolean isSecure() { if (_s == null || _sslSocketClass == null) return false; else return _sslSocketClass.isAssignableFrom(_s.getClass()); } /** * Returns the secure cipher algorithm. */ @Override public String cipherSuite() { if (! (_s instanceof SSLSocket)) { return super.cipherSuite(); } SSLSocket sslSocket = (SSLSocket) _s; SSLSession sslSession = sslSocket.getSession(); if (sslSession != null) { return sslSession.getCipherSuite(); } else { return null; } } /** * Returns the bits in the socket. */ @Override public int cipherBits() { if (! (_s instanceof SSLSocket)) return super.cipherBits(); SSLSocket sslSocket = (SSLSocket) _s; SSLSession sslSession = sslSocket.getSession(); if (sslSession != null) return _sslKeySizes.get(sslSession.getCipherSuite()); else return 0; } /** * Returns the client certificate. */ @Override public X509Certificate getClientCertificate() throws CertificateException { X509Certificate []certs = getClientCertificates(); if (certs == null || certs.length == 0) return null; else return certs[0]; } /** * Returns the client certificate. */ @Override public X509Certificate []getClientCertificates() throws CertificateException { if (_sslSocketClass == null) return null; else return getClientCertificatesImpl(); } /** * Returns the client certificate. */ private X509Certificate []getClientCertificatesImpl() throws CertificateException { if (! (_s instanceof SSLSocket)) return null; SSLSocket sslSocket = (SSLSocket) _s; SSLSession sslSession = sslSocket.getSession(); if (sslSession == null) return null; try { return (X509Certificate []) sslSession.getPeerCertificates(); } catch (SSLPeerUnverifiedException e) { if (log.isLoggable(Level.FINEST)) log.log(Level.FINEST, e.toString(), e); return null; } catch (Throwable e) { log.log(Level.FINER, e.toString(), e); } return null; } /** * Returns the selectable channel. */ @Override public SelectableChannel selectableChannel() { if (_s != null) { return _s.getChannel(); } else { return null; } } /** * Returns the socket's input stream. */ @Override public StreamImpl stream() throws IOException { if (_streamImpl == null) { _streamImpl = new SocketStream(); } _streamImpl.init(_s); return _streamImpl; } public void resetTotalBytes() { if (_streamImpl != null) { _streamImpl.resetTotalBytes(); } } @Override public long getTotalReadBytes() { return (_streamImpl == null) ? 0 : _streamImpl.getTotalReadBytes(); } @Override public long getTotalWriteBytes() { return (_streamImpl == null) ? 0 : _streamImpl.getTotalWriteBytes(); } /** * Returns true for closes. */ @Override public boolean isClosed() { return _s == null; } /** * Closes the underlying socket. */ @Override public void close() throws IOException { Socket s = _s; _s = null; if (s != null) { try { s.close(); } catch (Exception e) { } } } /** * Closes the write half of the stream. */ @Override public void closeWrite() throws IOException { if (_isWriteClosed) { return; } _isWriteClosed = true; SocketStream stream = _streamImpl; if (stream != null) { stream.closeWrite(); } else if (_s != null) { try { _s.shutdownOutput(); } catch (UnsupportedOperationException e) { log.log(Level.FINEST, e.toString(), e); } catch (Exception e) { log.finer(e.toString()); log.log(Level.FINEST, e.toString(), e); } } } @Override public String toString() { return getClass().getSimpleName() + "[" + _s + "]"; } static { try { _sslSocketClass = Class.forName("javax.net.ssl.SSLSocket"); } catch (Throwable e) { } _sslKeySizes = new HashMap<>(); _sslKeySizes.put("SSL_DH_anon_WITH_DES_CBC_SHA", 56); _sslKeySizes.put("SSL_DH_anon_WITH_3DES_EDE_CBC_SHA", 168); _sslKeySizes.put("SSL_DH_anon_WITH_RC4_128_MD5", 128); _sslKeySizes.put("SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA", 40); _sslKeySizes.put("SSL_DH_anon_EXPORT_WITH_RC4_40_MD5", 40); _sslKeySizes.put("SSL_DHE_DSS_WITH_DES_CBC_SHA", 56); _sslKeySizes.put("SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA", 40); _sslKeySizes.put("SSL_RSA_WITH_RC4_128_MD5", 128); _sslKeySizes.put("SSL_RSA_WITH_RC4_128_SHA", 128); _sslKeySizes.put("SSL_RSA_WITH_DES_CBC_SHA", 56); _sslKeySizes.put("SSL_RSA_WITH_3DES_EDE_CBC_SHA", 168); _sslKeySizes.put("SSL_RSA_EXPORT_WITH_RC4_40_MD5", 40); _sslKeySizes.put("SSL_RSA_WITH_NULL_MD5", 0); _sslKeySizes.put("SSL_RSA_WITH_NULL_SHA", 0); _sslKeySizes.put("SSL_DSA_WITH_RC4_128_MD5", 128); _sslKeySizes.put("SSL_DSA_WITH_RC4_128_SHA", 128); _sslKeySizes.put("SSL_DSA_WITH_DES_CBC_SHA", 56); _sslKeySizes.put("SSL_DSA_WITH_3DES_EDE_CBC_SHA", 168); _sslKeySizes.put("SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA", 168); _sslKeySizes.put("SSL_DSA_EXPORT_WITH_RC4_40_MD5", 40); _sslKeySizes.put("SSL_DSA_WITH_NULL_MD5", 0); _sslKeySizes.put("SSL_DSA_WITH_NULL_SHA", 0); } }