Back to index...

	/*
	* Copyright (c) 2005, 2011, Oracle and/or its affiliates. All rights reserved.
	* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
	*
	* This code is free software; you can redistribute it and/or modify it
	* under the terms of the GNU General Public License version 2 only, as
	* published by the Free Software Foundation. Oracle designates this
	* particular file as subject to the "Classpath" exception as provided
	* by Oracle in the LICENSE file that accompanied this code.
	*
	* This code is distributed in the hope that it will be useful, but WITHOUT
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
	* version 2 for more details (a copy is included in the LICENSE file that
	* accompanied this code).
	*
	* You should have received a copy of the GNU General Public License version
	* 2 along with this work; if not, write to the Free Software Foundation,
	* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
	*
	* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
	* or visit www.oracle.com if you need additional information or have any
	* questions.
	*/

	package sun.security.jgss.spnego;

	import java.io.*;
	import java.util.*;
	import org.ietf.jgss.*;
	import sun.security.jgss.*;
	import sun.security.util.*;

	/**
	* Implements the SPNEGO NegTokenInit token
	* as specified in RFC 2478
	*
	* NegTokenInit ::= SEQUENCE {
	* mechTypes [0] MechTypeList OPTIONAL,
	* reqFlags [1] ContextFlags OPTIONAL,
	* mechToken [2] OCTET STRING OPTIONAL,
	* mechListMIC [3] OCTET STRING OPTIONAL
	* }
	*
	* MechTypeList ::= SEQUENCE OF MechType
	*
	* MechType::= OBJECT IDENTIFIER
	*
	* ContextFlags ::= BIT STRING {
	* delegFlag (0),
	* mutualFlag (1),
	* replayFlag (2),
	* sequenceFlag (3),
	* anonFlag (4),
	* confFlag (5),
	* integFlag (6)
	* }
	*
	* @author Seema Malkani
	* @since 1.6
	*/

	public class NegTokenInit extends SpNegoToken {

	// DER-encoded mechTypes
	private byte[] mechTypes = null;
	private Oid[] mechTypeList = null;

	private BitArray reqFlags = null;
	private byte[] mechToken = null;
	private byte[] mechListMIC = null;

	NegTokenInit(byte[] mechTypes, BitArray flags,
	byte[] token, byte[] mechListMIC)
	{
	super(NEG_TOKEN_INIT_ID);
	this.mechTypes = mechTypes;
	this.reqFlags = flags;
	this.mechToken = token;
	this.mechListMIC = mechListMIC;
	}

	// Used by sun.security.jgss.wrapper.NativeGSSContext
	// to parse SPNEGO tokens
	public NegTokenInit(byte[] in) throws GSSException {
	super(NEG_TOKEN_INIT_ID);
	parseToken(in);
	}

	final byte[] encode() throws GSSException {
	try {
	// create negInitToken
	DerOutputStream initToken = new DerOutputStream();

	// DER-encoded mechTypes with CONTEXT 00
	if (mechTypes != null) {
	initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
	true, (byte) 0x00), mechTypes);
	}

	// write context flags with CONTEXT 01
	if (reqFlags != null) {
	DerOutputStream flags = new DerOutputStream();
	flags.putUnalignedBitString(reqFlags);
	initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
	true, (byte) 0x01), flags);
	}

	// mechToken with CONTEXT 02
	if (mechToken != null) {
	DerOutputStream dataValue = new DerOutputStream();
	dataValue.putOctetString(mechToken);
	initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
	true, (byte) 0x02), dataValue);
	}

	// mechListMIC with CONTEXT 03
	if (mechListMIC != null) {
	if (DEBUG) {
	System.out.println("SpNegoToken NegTokenInit: " +
	"sending MechListMIC");
	}
	DerOutputStream mic = new DerOutputStream();
	mic.putOctetString(mechListMIC);
	initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
	true, (byte) 0x03), mic);
	}

	// insert in a SEQUENCE
	DerOutputStream out = new DerOutputStream();
	out.write(DerValue.tag_Sequence, initToken);

	return out.toByteArray();

	} catch (IOException e) {
	throw new GSSException(GSSException.DEFECTIVE_TOKEN, -1,
	"Invalid SPNEGO NegTokenInit token : " + e.getMessage());
	}
	}

	private void parseToken(byte[] in) throws GSSException {
	try {
	DerValue der = new DerValue(in);
	// verify NegotiationToken type token
	if (!der.isContextSpecific((byte) NEG_TOKEN_INIT_ID)) {
	throw new IOException("SPNEGO NegoTokenInit : " +
	"did not have right token type");
	}
	DerValue tmp1 = der.data.getDerValue();
	if (tmp1.tag != DerValue.tag_Sequence) {
	throw new IOException("SPNEGO NegoTokenInit : " +
	"did not have the Sequence tag");
	}

	// parse various fields if present
	int lastField = -1;
	while (tmp1.data.available() > 0) {
	DerValue tmp2 = tmp1.data.getDerValue();
	if (tmp2.isContextSpecific((byte)0x00)) {
	// get the DER-encoded sequence of mechTypes
	lastField = checkNextField(lastField, 0);
	DerInputStream mValue = tmp2.data;
	mechTypes = mValue.toByteArray();

	// read all the mechTypes
	DerValue[] mList = mValue.getSequence(0);
	mechTypeList = new Oid[mList.length];
	ObjectIdentifier mech = null;
	for (int i = 0; i < mList.length; i++) {
	mech = mList[i].getOID();
	if (DEBUG) {
	System.out.println("SpNegoToken NegTokenInit: " +
	"reading Mechanism Oid = " + mech);
	}
	mechTypeList[i] = new Oid(mech.toString());
	}
	} else if (tmp2.isContextSpecific((byte)0x01)) {
	lastField = checkNextField(lastField, 1);
	// received reqFlags, skip it
	} else if (tmp2.isContextSpecific((byte)0x02)) {
	lastField = checkNextField(lastField, 2);
	if (DEBUG) {
	System.out.println("SpNegoToken NegTokenInit: " +
	"reading Mech Token");
	}
	mechToken = tmp2.data.getOctetString();
	} else if (tmp2.isContextSpecific((byte)0x03)) {
	lastField = checkNextField(lastField, 3);
	if (!GSSUtil.useMSInterop()) {
	mechListMIC = tmp2.data.getOctetString();
	if (DEBUG) {
	System.out.println("SpNegoToken NegTokenInit: " +
	"MechListMIC Token = " +
	getHexBytes(mechListMIC));
	}
	}
	}
	}
	} catch (IOException e) {
	throw new GSSException(GSSException.DEFECTIVE_TOKEN, -1,
	"Invalid SPNEGO NegTokenInit token : " + e.getMessage());
	}
	}

	byte[] getMechTypes() {
	return mechTypes;
	}

	// Used by sun.security.jgss.wrapper.NativeGSSContext
	// to find the mechs in SPNEGO tokens
	public Oid[] getMechTypeList() {
	return mechTypeList;
	}

	BitArray getReqFlags() {
	return reqFlags;
	}

	// Used by sun.security.jgss.wrapper.NativeGSSContext
	// to access the mech token portion of SPNEGO tokens
	public byte[] getMechToken() {
	return mechToken;
	}

	byte[] getMechListMIC() {
	return mechListMIC;
	}

	}

Back to index...