|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
*/ |
|
|
|
package sun.security.ssl; |
|
|
|
import java.io.IOException; |
|
import java.nio.BufferOverflowException; |
|
import java.nio.BufferUnderflowException; |
|
import java.nio.ByteBuffer; |
|
import java.util.ArrayList; |
|
|
|
|
|
|
|
*/ |
|
final class PostHandshakeContext extends HandshakeContext { |
|
PostHandshakeContext(TransportContext context) throws IOException { |
|
super(context); |
|
|
|
if (!negotiatedProtocol.useTLS13PlusSpec()) { |
|
throw conContext.fatal(Alert.UNEXPECTED_MESSAGE, |
|
"Post-handshake not supported in " + negotiatedProtocol.name); |
|
} |
|
|
|
this.localSupportedSignAlgs = new ArrayList<>( |
|
context.conSession.getLocalSupportedSignatureSchemes()); |
|
|
|
|
|
if (context.sslConfig.isClientMode) { |
|
handshakeConsumers.putIfAbsent( |
|
SSLHandshake.KEY_UPDATE.id, |
|
SSLHandshake.KEY_UPDATE); |
|
handshakeConsumers.putIfAbsent( |
|
SSLHandshake.NEW_SESSION_TICKET.id, |
|
SSLHandshake.NEW_SESSION_TICKET); |
|
} else { |
|
handshakeConsumers.putIfAbsent( |
|
SSLHandshake.KEY_UPDATE.id, |
|
SSLHandshake.KEY_UPDATE); |
|
} |
|
|
|
handshakeFinished = true; |
|
handshakeSession = context.conSession; |
|
} |
|
|
|
@Override |
|
void kickstart() throws IOException { |
|
SSLHandshake.kickstart(this); |
|
} |
|
|
|
@Override |
|
void dispatch(byte handshakeType, ByteBuffer fragment) throws IOException { |
|
SSLConsumer consumer = handshakeConsumers.get(handshakeType); |
|
if (consumer == null) { |
|
throw conContext.fatal(Alert.UNEXPECTED_MESSAGE, |
|
"Unexpected post-handshake message: " + |
|
SSLHandshake.nameOf(handshakeType)); |
|
} |
|
|
|
try { |
|
consumer.consume(this, fragment); |
|
} catch (UnsupportedOperationException unsoe) { |
|
throw conContext.fatal(Alert.UNEXPECTED_MESSAGE, |
|
"Unsupported post-handshake message: " + |
|
SSLHandshake.nameOf(handshakeType), unsoe); |
|
} catch (BufferUnderflowException | BufferOverflowException be) { |
|
throw conContext.fatal(Alert.DECODE_ERROR, |
|
"Illegal handshake message: " + |
|
SSLHandshake.nameOf(handshakeType), be); |
|
} |
|
} |
|
|
|
static boolean isConsumable(TransportContext context, byte handshakeType) { |
|
if (handshakeType == SSLHandshake.KEY_UPDATE.id) { |
|
// The KeyUpdate handshake message does not apply to TLS 1.2 and |
|
|
|
return context.protocolVersion.useTLS13PlusSpec(); |
|
} |
|
|
|
if (handshakeType == SSLHandshake.NEW_SESSION_TICKET.id) { |
|
// The new session ticket handshake message could be consumer in |
|
|
|
return context.sslConfig.isClientMode; |
|
} |
|
|
|
|
|
return false; |
|
} |
|
} |