net.grinder.tools.tcpproxy

Class TCPProxySSLSocketFactoryImplementation

java.lang.Object

net.grinder.tools.tcpproxy.TCPProxySSLSocketFactoryImplementation

All Implemented Interfaces:

TCPProxySocketFactory, TCPProxySSLSocketFactory

public final class TCPProxySSLSocketFactoryImplementation
extends Object
implements TCPProxySSLSocketFactory

TCPProxySocketFactory for SSL connections.

ARGHH. I hate JSSE.

The JSSE docs rabbit on about being able to create factories with the required parameters, this is a lie. Where is "SSL[Server]SocketFactory.setEnabledCipherSuites()"? Hence the need for our own abstract factories.

We can't install our own TrustManagerFactory without messing with the security properties file. Hence we create our own SSLContext and initialise it.

- PhilA

Author:

Philip Aston, Phil Dawes

Constructor Summary

Constructors

Constructor and Description
TCPProxySSLSocketFactoryImplementation() Construct a TCPProxySSLSocketFactoryImplementation that uses the built-in key store.
TCPProxySSLSocketFactoryImplementation(File keyStoreFile, char[] keyStorePassword, String keyStoreType) Construct a TCPProxySSLSocketFactoryImplementation that uses the specified key store.

Method Summary

Methods

Modifier and Type	Method and Description
Socket	createClientSocket(EndPoint remoteEndPoint) Factory method for client sockets.
Socket	createClientSocket(Socket existingSocket, EndPoint remoteEndPoint) Factory method for client sockets that are layered over existing sockets.
ServerSocket	createServerSocket(EndPoint localEndPoint, int timeout) Factory method for server sockets.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TCPProxySSLSocketFactoryImplementation

public TCPProxySSLSocketFactoryImplementation(File keyStoreFile,
                                      char[] keyStorePassword,
                                      String keyStoreType)
                                       throws IOException,
                                              GeneralSecurityException,
                                              SSLContextFactory.SSLContextFactoryException

Construct a TCPProxySSLSocketFactoryImplementation that uses the specified key store.

Parameters:

keyStoreFile - Key store file.

keyStorePassword - Key store password, or null if no password.

keyStoreType - Key store type, or null if the default keystore type should be used.

Throws:

IOException - If an I/O error occurs.

GeneralSecurityException - If a security error occurs.

SSLContextFactory.SSLContextFactoryException - If SSLContext could not be created.

TCPProxySSLSocketFactoryImplementation

public TCPProxySSLSocketFactoryImplementation()
                                       throws IOException,
                                              GeneralSecurityException,
                                              SSLContextFactory.SSLContextFactoryException

Construct a TCPProxySSLSocketFactoryImplementation that uses the built-in key store.

Throws:

IOException - If an I/O error occurs.

GeneralSecurityException - If a security error occurs.

SSLContextFactory.SSLContextFactoryException - If SSLContext could not be created.

Method Detail

createServerSocket

public ServerSocket createServerSocket(EndPoint localEndPoint,
                              int timeout)
                                throws IOException

Factory method for server sockets.

Specified by:

createServerSocket in interface TCPProxySocketFactory

Parameters:

localEndPoint - Local host and port.

timeout - Socket timeout.

Returns:

A new ServerSocket.

Throws:

IOException - If an error occurs.

createClientSocket

public Socket createClientSocket(EndPoint remoteEndPoint)
                          throws IOException

Factory method for client sockets.

Specified by:

createClientSocket in interface TCPProxySocketFactory

Parameters:

remoteEndPoint - Remote host and port.

Returns:

A new Socket.

Throws:

IOException - If an error occurs.

createClientSocket

public Socket createClientSocket(Socket existingSocket,
                        EndPoint remoteEndPoint)
                          throws IOException

Factory method for client sockets that are layered over existing sockets. Used to establish HTTPS proxy connections.

The SSL socket takes ownership of the existing socket; when the SSL socket is closed, the existing socket will also be closed.

Specified by:

createClientSocket in interface TCPProxySSLSocketFactory

Parameters:

existingSocket - The existing socket.

remoteEndPoint - Remote host and port. Not the proxy. As far as I can gather, the JSSE does not use this information.

Returns:

A new Socket.

Throws:

IOException - If an error occurs.