org.owasp.dependencycheck.utils

Class SSLSocketFactoryEx

java.lang.Object

javax.net.SocketFactory

javax.net.ssl.SSLSocketFactory

org.owasp.dependencycheck.utils.SSLSocketFactoryEx

public class SSLSocketFactoryEx
extends javax.net.ssl.SSLSocketFactory

TODO - is this class needed anymore as we do not support Java 6 and 7. This class is used to enable additional ciphers used by the SSL Socket. This is specifically because the NVD stopped supporting TLS 1.0 and Java 6 and 7 clients by default were unable to connect to download the NVD data feeds.

The following code was copied from http://stackoverflow.com/questions/1037590/which-cipher-suites-to-enable-for-ssl-socket/23365536#23365536

Version:

$Id: $Id

Author:

jww

Constructor Summary

Constructors

Constructor and Description
SSLSocketFactoryEx(javax.net.ssl.KeyManager[] km, javax.net.ssl.TrustManager[] tm, java.security.SecureRandom random, Settings settings) Constructs a new SSLSocketFactory.
SSLSocketFactoryEx(Settings settings) Constructs a new SSLSocketFactory.
SSLSocketFactoryEx(javax.net.ssl.SSLContext ctx, Settings settings) Constructs a new SSLSocketFactory.

Method Summary

Modifier and Type	Method and Description
java.net.Socket	createSocket(java.net.InetAddress host, int port)
java.net.Socket	createSocket(java.net.InetAddress address, int port, java.net.InetAddress localAddress, int localPort)
java.net.Socket	createSocket(java.net.Socket s, java.lang.String host, int port, boolean autoClose)
java.net.Socket	createSocket(java.lang.String host, int port)
java.net.Socket	createSocket(java.lang.String host, int port, java.net.InetAddress localHost, int localPort)
java.lang.String[]	getDefaultCipherSuites()
java.lang.String[]	getDefaultProtocols() Returns the default protocols.
protected java.lang.String[]	getProtocolList() Returns the protocol list.
java.lang.String[]	getSupportedCipherSuites()
java.lang.String[]	getSupportedProtocols() Returns the supported protocols.

Methods inherited from class javax.net.ssl.SSLSocketFactory

createSocket, getDefault

Methods inherited from class javax.net.SocketFactory

createSocket

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SSLSocketFactoryEx

public SSLSocketFactoryEx(Settings settings)
                   throws java.security.NoSuchAlgorithmException,
                          java.security.KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

settings - reference to the configured settings

Throws:

java.security.NoSuchAlgorithmException - thrown when an algorithm is not supported

java.security.KeyManagementException - thrown if initialization fails

SSLSocketFactoryEx

public SSLSocketFactoryEx(javax.net.ssl.KeyManager[] km,
                          javax.net.ssl.TrustManager[] tm,
                          java.security.SecureRandom random,
                          Settings settings)
                   throws java.security.NoSuchAlgorithmException,
                          java.security.KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

km - the key manager

tm - the trust manager

random - secure random

settings - reference to the configured settings

Throws:

java.security.NoSuchAlgorithmException - thrown when an algorithm is not supported

java.security.KeyManagementException - thrown if initialization fails

SSLSocketFactoryEx

public SSLSocketFactoryEx(javax.net.ssl.SSLContext ctx,
                          Settings settings)
                   throws java.security.NoSuchAlgorithmException,
                          java.security.KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

ctx - the SSL context

settings - reference to the configured settings

Throws:

java.security.NoSuchAlgorithmException - thrown when an algorithm is not supported

java.security.KeyManagementException - thrown if initialization fails

Method Detail

getDefaultCipherSuites

public java.lang.String[] getDefaultCipherSuites()

Returns the default cipher suites.

Specified by:

getDefaultCipherSuites in class javax.net.ssl.SSLSocketFactory

getSupportedCipherSuites

public java.lang.String[] getSupportedCipherSuites()

Returns the supported cipher suites.

Specified by:

getSupportedCipherSuites in class javax.net.ssl.SSLSocketFactory

getDefaultProtocols

public java.lang.String[] getDefaultProtocols()

Returns the default protocols.

Returns:

the default protocols

getSupportedProtocols

public java.lang.String[] getSupportedProtocols()

Returns the supported protocols.

Returns:

the supported protocols

createSocket

public java.net.Socket createSocket(java.net.Socket s,
                                    java.lang.String host,
                                    int port,
                                    boolean autoClose)
                             throws java.io.IOException

Creates an SSL Socket.

Specified by:

createSocket in class javax.net.ssl.SSLSocketFactory

Throws:

java.io.IOException

createSocket

public java.net.Socket createSocket(java.net.InetAddress address,
                                    int port,
                                    java.net.InetAddress localAddress,
                                    int localPort)
                             throws java.io.IOException

Creates a new SSL Socket.

Specified by:

createSocket in class javax.net.SocketFactory

Throws:

java.io.IOException

createSocket

public java.net.Socket createSocket(java.lang.String host,
                                    int port,
                                    java.net.InetAddress localHost,
                                    int localPort)
                             throws java.io.IOException

Creates a new SSL Socket.

Specified by:

createSocket in class javax.net.SocketFactory

Throws:

java.io.IOException

createSocket

public java.net.Socket createSocket(java.net.InetAddress host,
                                    int port)
                             throws java.io.IOException

Creates a new SSL Socket.

Specified by:

createSocket in class javax.net.SocketFactory

Throws:

java.io.IOException

createSocket

public java.net.Socket createSocket(java.lang.String host,
                                    int port)
                             throws java.io.IOException

Creates a new SSL Socket.

Specified by:

createSocket in class javax.net.SocketFactory

Throws:

java.io.IOException

getProtocolList

protected java.lang.String[] getProtocolList()

Returns the protocol list.

Returns:

the protocol list