Java SSLSocket.getEnabledCipherSuites方法代码示例

import javax.net.ssl.SSLSocket; //导入方法依赖的package包/类
/**
 * Returns a copy of this that omits cipher suites and TLS versions not enabled by {@code
 * sslSocket}.
 */
private ConnectionSpec supportedSpec(SSLSocket sslSocket, boolean isFallback) {
  String[] cipherSuitesIntersection = cipherSuites != null
      ? intersect(CipherSuite.ORDER_BY_NAME, sslSocket.getEnabledCipherSuites(), cipherSuites)
      : sslSocket.getEnabledCipherSuites();
  String[] tlsVersionsIntersection = tlsVersions != null
      ? intersect(Util.NATURAL_ORDER, sslSocket.getEnabledProtocols(), tlsVersions)
      : sslSocket.getEnabledProtocols();

  // In accordance with https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00
  // the SCSV cipher is added to signal that a protocol fallback has taken place.
  String[] supportedCipherSuites = sslSocket.getSupportedCipherSuites();
  int indexOfFallbackScsv = indexOf(
      CipherSuite.ORDER_BY_NAME, supportedCipherSuites, "TLS_FALLBACK_SCSV");
  if (isFallback && indexOfFallbackScsv != -1) {
    cipherSuitesIntersection = concat(
        cipherSuitesIntersection, supportedCipherSuites[indexOfFallbackScsv]);
  }

  return new Builder(this)
      .cipherSuites(cipherSuitesIntersection)
      .tlsVersions(tlsVersionsIntersection)
      .build();
}
 

import javax.net.ssl.SSLSocket; //导入方法依赖的package包/类
private ConnectionSpec supportedSpec(SSLSocket sslSocket, boolean isFallback) {
    String[] cipherSuitesIntersection;
    String[] tlsVersionsIntersection;
    if (this.cipherSuites != null) {
        cipherSuitesIntersection = (String[]) Util.intersect(String.class, this.cipherSuites,
                sslSocket.getEnabledCipherSuites());
    } else {
        cipherSuitesIntersection = sslSocket.getEnabledCipherSuites();
    }
    if (this.tlsVersions != null) {
        tlsVersionsIntersection = (String[]) Util.intersect(String.class, this.tlsVersions,
                sslSocket.getEnabledProtocols());
    } else {
        tlsVersionsIntersection = sslSocket.getEnabledProtocols();
    }
    if (isFallback && Util.contains(sslSocket.getSupportedCipherSuites(),
            "TLS_FALLBACK_SCSV")) {
        cipherSuitesIntersection = Util.concat(cipherSuitesIntersection, "TLS_FALLBACK_SCSV");
    }
    return new Builder(this).cipherSuites(cipherSuitesIntersection).tlsVersions
            (tlsVersionsIntersection).build();
}
 

import javax.net.ssl.SSLSocket; //导入方法依赖的package包/类
public static void printInfo(SSLSocket socket) {
    System.out.println();
    System.out.println("--- SSL Socket Info ---");
    System.out.print(" SupportedProtocols    : ");
    printStringArray(socket.getSupportedProtocols());
    System.out.println(" EnabledProtocols      : "
            + socket.getEnabledProtocols()[0]);
    System.out.print(" SupportedCipherSuites : ");
    String[] supportedCipherSuites = socket.getEnabledCipherSuites();
    Arrays.sort(supportedCipherSuites);
    printStringArray(supportedCipherSuites);
    System.out.println(" EnabledCipherSuites   : "
            + socket.getEnabledCipherSuites()[0]);
    System.out.println(" NeedClientAuth        : "
            + socket.getNeedClientAuth());
    System.out.println(" WantClientAuth        : "
            + socket.getWantClientAuth());
    System.out.println("-----------------------");
}
 

import javax.net.ssl.SSLSocket; //导入方法依赖的package包/类
public static String[] getEnalbedCiphers(String enabledCiphers) {
  SSLOption option = new SSLOption();
  option.setProtocols("TLSv1.2");
  option.setCiphers(enabledCiphers);
  SSLCustom custom = SSLCustom.defaultSSLCustom();
  SSLSocket socket = createSSLSocket(option, custom);
  return socket.getEnabledCipherSuites();
}
 

import javax.net.ssl.SSLSocket; //导入方法依赖的package包/类
private Socket addAnonCipher(Socket socket) {
    SSLSocket ssl = (SSLSocket) socket;
    final String[] ciphers = ssl.getEnabledCipherSuites();
    final String[] anonCiphers = { "SSL_DH_anon_WITH_RC4_128_MD5"
                                   , "SSL_DH_anon_WITH_RC4_128_MD5"
                                   , "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA"
                                   , "SSL_DH_anon_WITH_DES_CBC_SHA"
                                   , "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5"
                                   , "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA" };
    final String[] newCiphers = new String[ciphers.length + anonCiphers.length];
    System.arraycopy(ciphers, 0, newCiphers, 0, ciphers.length);
    System.arraycopy(anonCiphers, 0, newCiphers, ciphers.length, anonCiphers.length);
    ssl.setEnabledCipherSuites(newCiphers);
    return ssl;
}