org.owasp.dependencycheck.utils

Class SSLSocketFactoryEx

java.lang.Object

javax.net.SocketFactory

javax.net.ssl.SSLSocketFactory

org.owasp.dependencycheck.utils.SSLSocketFactoryEx

public class SSLSocketFactoryEx
extends SSLSocketFactory

TODO - is this class needed anymore as we do not support Java 6 and 7. This class is used to enable additional ciphers used by the SSL Socket. This is specifically because the NVD stopped supporting TLS 1.0 and Java 6 and 7 clients by default were unable to connect to download the NVD data feeds.

The following code was copied from http://stackoverflow.com/questions/1037590/which-cipher-suites-to-enable-for-ssl-socket/23365536#23365536

Version:

$Id: $Id

Author:

jww

Constructor Summary

Constructors

Constructor and Description
SSLSocketFactoryEx(KeyManager[] km, TrustManager[] tm, SecureRandom random, Settings settings) Constructs a new SSLSocketFactory.
SSLSocketFactoryEx(Settings settings) Constructs a new SSLSocketFactory.
SSLSocketFactoryEx(SSLContext ctx, Settings settings) Constructs a new SSLSocketFactory.

Method Summary

Modifier and Type	Method and Description
Socket	createSocket(InetAddress host, int port)
Socket	createSocket(InetAddress address, int port, InetAddress localAddress, int localPort)
Socket	createSocket(Socket s, String host, int port, boolean autoClose)
Socket	createSocket(String host, int port)
Socket	createSocket(String host, int port, InetAddress localHost, int localPort)
String[]	getDefaultCipherSuites()
String[]	getDefaultProtocols() Returns the default protocols.
protected String[]	getProtocolList() Returns the protocol list.
String[]	getSupportedCipherSuites()
String[]	getSupportedProtocols() Returns the supported protocols.

Methods inherited from class javax.net.ssl.SSLSocketFactory

createSocket, getDefault

Methods inherited from class javax.net.SocketFactory

createSocket

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SSLSocketFactoryEx

public SSLSocketFactoryEx(Settings settings)
                   throws NoSuchAlgorithmException,
                          KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

settings - reference to the configured settings

Throws:

NoSuchAlgorithmException - thrown when an algorithm is not supported

KeyManagementException - thrown if initialization fails

SSLSocketFactoryEx

public SSLSocketFactoryEx(KeyManager[] km,
                          TrustManager[] tm,
                          SecureRandom random,
                          Settings settings)
                   throws NoSuchAlgorithmException,
                          KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

km - the key manager

tm - the trust manager

random - secure random

settings - reference to the configured settings

Throws:

NoSuchAlgorithmException - thrown when an algorithm is not supported

KeyManagementException - thrown if initialization fails

SSLSocketFactoryEx

public SSLSocketFactoryEx(SSLContext ctx,
                          Settings settings)
                   throws NoSuchAlgorithmException,
                          KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

ctx - the SSL context

settings - reference to the configured settings

Throws:

NoSuchAlgorithmException - thrown when an algorithm is not supported

KeyManagementException - thrown if initialization fails

Method Detail

getDefaultCipherSuites

public String[] getDefaultCipherSuites()

Returns the default cipher suites.

Specified by:

getDefaultCipherSuites in class SSLSocketFactory

getSupportedCipherSuites

public String[] getSupportedCipherSuites()

Returns the supported cipher suites.

Specified by:

getSupportedCipherSuites in class SSLSocketFactory

getDefaultProtocols

public String[] getDefaultProtocols()

Returns the default protocols.

Returns:

the default protocols

getSupportedProtocols

public String[] getSupportedProtocols()

Returns the supported protocols.

Returns:

the supported protocols

createSocket

public Socket createSocket(Socket s,
                           String host,
                           int port,
                           boolean autoClose)
                    throws IOException

Creates an SSL Socket.

Specified by:

createSocket in class SSLSocketFactory

Throws:

IOException

createSocket

public Socket createSocket(InetAddress address,
                           int port,
                           InetAddress localAddress,
                           int localPort)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(String host,
                           int port,
                           InetAddress localHost,
                           int localPort)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(InetAddress host,
                           int port)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(String host,
                           int port)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Throws:

IOException

getProtocolList

protected String[] getProtocolList()

Returns the protocol list.

Returns:

the protocol list