Class ReferenceCountedOpenSslEngine

java.lang.Object

javax.net.ssl.SSLEngine

io.netty.handler.ssl.ReferenceCountedOpenSslEngine

All Implemented Interfaces:

ReferenceCounted

Direct Known Subclasses:

OpenSslEngine

public class ReferenceCountedOpenSslEngine
extends SSLEngine
implements ReferenceCounted

Implements a SSLEngine using OpenSSL BIO abstractions.

Instances of this class must be released or else native memory will leak!

Instances of this class must be released before the ReferenceCountedOpenSslContext the instance depends upon are released. Otherwise if any method of this class is called which uses the the ReferenceCountedOpenSslContext JNI resources the JVM may crash.

Method Summary

Modifier and Type	Method	Description
final void	beginHandshake()
final void	closeInbound()
final void	closeOutbound()
String	getApplicationProtocol()
final Runnable	getDelegatedTask()
final String[]	getEnabledCipherSuites()
final String[]	getEnabledProtocols()
final boolean	getEnableSessionCreation()
String	getHandshakeApplicationProtocol()
final SSLSession	getHandshakeSession()
final SSLEngineResult.HandshakeStatus	getHandshakeStatus()
final boolean	getNeedClientAuth()
String	getNegotiatedApplicationProtocol()
byte[]	getOcspResponse()	Returns the OCSP response or null if the server didn't provide a stapled OCSP response.
final SSLSession	getSession()
final SSLParameters	getSSLParameters()
final String[]	getSupportedCipherSuites()
final String[]	getSupportedProtocols()
final boolean	getUseClientMode()
final boolean	getWantClientAuth()
final boolean	isInboundDone()
final boolean	isOutboundDone()
final int	refCnt()	Returns the reference count of this object.
final boolean	release()	Decreases the reference count by 1 and deallocates this object if the reference count reaches at 0.
final boolean	release(int decrement)	Decreases the reference count by the specified decrement and deallocates this object if the reference count reaches at 0.
final ReferenceCounted	retain()	Increases the reference count by 1.
final ReferenceCounted	retain(int increment)	Increases the reference count by the specified increment.
final void	setEnabledCipherSuites(String[] cipherSuites)
final void	setEnabledProtocols(String[] protocols)	TLS doesn't support a way to advertise non-contiguous versions from the client's perspective, and the client just advertises the max supported version.
final void	setEnableSessionCreation(boolean b)
final void	setNeedClientAuth(boolean b)
void	setOcspResponse(byte[] response)	Sets the OCSP response.
final void	setSSLParameters(SSLParameters sslParameters)
final void	setUseClientMode(boolean clientMode)
final void	setVerify(int verifyMode, int depth)	See SSL_set_verify and SSL.setVerify(long, int, int).
final void	setWantClientAuth(boolean b)
final void	shutdown()	Destroys this engine.
final long	sslPointer()	Returns the pointer to the SSL object for this ReferenceCountedOpenSslEngine.
final ReferenceCounted	touch()	Records the current access location of this object for debugging purposes.
final ReferenceCounted	touch(Object hint)	Records the current access location of this object with an additional arbitrary information for debugging purposes.
final SSLEngineResult	unwrap(ByteBuffer[] srcs, int srcsOffset, int srcsLength, ByteBuffer[] dsts, int dstsOffset, int dstsLength)
final SSLEngineResult	unwrap(ByteBuffer[] srcs, ByteBuffer[] dsts)
final SSLEngineResult	unwrap(ByteBuffer src, ByteBuffer dst)
final SSLEngineResult	unwrap(ByteBuffer src, ByteBuffer[] dsts)
final SSLEngineResult	unwrap(ByteBuffer src, ByteBuffer[] dsts, int offset, int length)
final SSLEngineResult	wrap(ByteBuffer[] srcs, int offset, int length, ByteBuffer dst)
final SSLEngineResult	wrap(ByteBuffer src, ByteBuffer dst)

Methods inherited from class SSLEngine

getHandshakeApplicationProtocolSelector, getPeerHost, getPeerPort, setHandshakeApplicationProtocolSelector, wrap

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

setOcspResponse

@UnstableApi
public void setOcspResponse(byte[] response)

Sets the OCSP response.

getOcspResponse

@UnstableApi
public byte[] getOcspResponse()

Returns the OCSP response or null if the server didn't provide a stapled OCSP response.

refCnt

public final int refCnt()

Description copied from interface: ReferenceCounted

Returns the reference count of this object. If 0, it means this object has been deallocated.

Specified by:

refCnt in interface ReferenceCounted

retain

public final ReferenceCounted retain()

Description copied from interface: ReferenceCounted

Increases the reference count by 1.

Specified by:

retain in interface ReferenceCounted

retain

public final ReferenceCounted retain(int increment)

Description copied from interface: ReferenceCounted

Increases the reference count by the specified increment.

Specified by:

retain in interface ReferenceCounted

touch

public final ReferenceCounted touch()

Description copied from interface: ReferenceCounted

Records the current access location of this object for debugging purposes. If this object is determined to be leaked, the information recorded by this operation will be provided to you via ResourceLeakDetector. This method is a shortcut to touch(null).

Specified by:

touch in interface ReferenceCounted

touch

public final ReferenceCounted touch(Object hint)

Description copied from interface: ReferenceCounted

Records the current access location of this object with an additional arbitrary information for debugging purposes. If this object is determined to be leaked, the information recorded by this operation will be provided to you via ResourceLeakDetector.

Specified by:

touch in interface ReferenceCounted

release

public final boolean release()

Description copied from interface: ReferenceCounted

Decreases the reference count by 1 and deallocates this object if the reference count reaches at 0.

Specified by:

release in interface ReferenceCounted

Returns:

true if and only if the reference count became 0 and this object has been deallocated

release

public final boolean release(int decrement)

Description copied from interface: ReferenceCounted

Decreases the reference count by the specified decrement and deallocates this object if the reference count reaches at 0.

Specified by:

release in interface ReferenceCounted

Returns:

true if and only if the reference count became 0 and this object has been deallocated

getApplicationProtocol

public String getApplicationProtocol()

Overrides:

getApplicationProtocol in class SSLEngine

getHandshakeApplicationProtocol

public String getHandshakeApplicationProtocol()

Overrides:

getHandshakeApplicationProtocol in class SSLEngine

getHandshakeSession

public final SSLSession getHandshakeSession()

Overrides:

getHandshakeSession in class SSLEngine

sslPointer

public final long sslPointer()

Returns the pointer to the SSL object for this ReferenceCountedOpenSslEngine. Be aware that it is freed as soon as the release() or shutdown() methods are called. At this point 0 will be returned.

shutdown

public final void shutdown()

Destroys this engine.

wrap

public final SSLEngineResult wrap(ByteBuffer[] srcs,
 int offset,
 int length,
 ByteBuffer dst)
                           throws SSLException

Specified by:

wrap in class SSLEngine

Throws:

SSLException

unwrap

public final SSLEngineResult unwrap(ByteBuffer[] srcs,
 int srcsOffset,
 int srcsLength,
 ByteBuffer[] dsts,
 int dstsOffset,
 int dstsLength)
                             throws SSLException

Throws:

SSLException

unwrap

public final SSLEngineResult unwrap(ByteBuffer[] srcs,
 ByteBuffer[] dsts)
                             throws SSLException

Throws:

SSLException

unwrap

public final SSLEngineResult unwrap(ByteBuffer src,
 ByteBuffer[] dsts,
 int offset,
 int length)
                             throws SSLException

Specified by:

unwrap in class SSLEngine

Throws:

SSLException

wrap

public final SSLEngineResult wrap(ByteBuffer src,
 ByteBuffer dst)
                           throws SSLException

Overrides:

wrap in class SSLEngine

Throws:

SSLException

unwrap

public final SSLEngineResult unwrap(ByteBuffer src,
 ByteBuffer dst)
                             throws SSLException

Overrides:

unwrap in class SSLEngine

Throws:

SSLException

unwrap

public final SSLEngineResult unwrap(ByteBuffer src,
 ByteBuffer[] dsts)
                             throws SSLException

Overrides:

unwrap in class SSLEngine

Throws:

SSLException

getDelegatedTask

public final Runnable getDelegatedTask()

Specified by:

getDelegatedTask in class SSLEngine

closeInbound

public final void closeInbound()
                        throws SSLException

Specified by:

closeInbound in class SSLEngine

Throws:

SSLException

isInboundDone

public final boolean isInboundDone()

Specified by:

isInboundDone in class SSLEngine

closeOutbound

public final void closeOutbound()

Specified by:

closeOutbound in class SSLEngine

isOutboundDone

public final boolean isOutboundDone()

Specified by:

isOutboundDone in class SSLEngine

getSupportedCipherSuites

public final String[] getSupportedCipherSuites()

Specified by:

getSupportedCipherSuites in class SSLEngine

getEnabledCipherSuites

public final String[] getEnabledCipherSuites()

Specified by:

getEnabledCipherSuites in class SSLEngine

setEnabledCipherSuites

public final void setEnabledCipherSuites(String[] cipherSuites)

Specified by:

setEnabledCipherSuites in class SSLEngine

getSupportedProtocols

public final String[] getSupportedProtocols()

Specified by:

getSupportedProtocols in class SSLEngine

getEnabledProtocols

public final String[] getEnabledProtocols()

Specified by:

getEnabledProtocols in class SSLEngine

setEnabledProtocols

public final void setEnabledProtocols(String[] protocols)

TLS doesn't support a way to advertise non-contiguous versions from the client's perspective, and the client just advertises the max supported version. The TLS protocol also doesn't support all different combinations of discrete protocols, and instead assumes contiguous ranges. OpenSSL has some unexpected behavior (e.g. handshake failures) if non-contiguous protocols are used even where there is a compatible set of protocols and ciphers. For these reasons this method will determine the minimum protocol and the maximum protocol and enabled a contiguous range from [min protocol, max protocol] in OpenSSL.

Specified by:

setEnabledProtocols in class SSLEngine

getSession

public final SSLSession getSession()

Specified by:

getSession in class SSLEngine

beginHandshake

public final void beginHandshake()
                          throws SSLException

Specified by:

beginHandshake in class SSLEngine

Throws:

SSLException

getHandshakeStatus

public final SSLEngineResult.HandshakeStatus getHandshakeStatus()

Specified by:

getHandshakeStatus in class SSLEngine

setUseClientMode

public final void setUseClientMode(boolean clientMode)

Specified by:

setUseClientMode in class SSLEngine

getUseClientMode

public final boolean getUseClientMode()

Specified by:

getUseClientMode in class SSLEngine

setNeedClientAuth

public final void setNeedClientAuth(boolean b)

Specified by:

setNeedClientAuth in class SSLEngine

getNeedClientAuth

public final boolean getNeedClientAuth()

Specified by:

getNeedClientAuth in class SSLEngine

setWantClientAuth

public final void setWantClientAuth(boolean b)

Specified by:

setWantClientAuth in class SSLEngine

getWantClientAuth

public final boolean getWantClientAuth()

Specified by:

getWantClientAuth in class SSLEngine

setVerify

@UnstableApi
public final void setVerify(int verifyMode,
 int depth)

See SSL_set_verify and SSL.setVerify(long, int, int).

setEnableSessionCreation

public final void setEnableSessionCreation(boolean b)

Specified by:

setEnableSessionCreation in class SSLEngine

getEnableSessionCreation

public final boolean getEnableSessionCreation()

Specified by:

getEnableSessionCreation in class SSLEngine

getSSLParameters

public final SSLParameters getSSLParameters()

Overrides:

getSSLParameters in class SSLEngine

setSSLParameters

public final void setSSLParameters(SSLParameters sslParameters)

Overrides:

setSSLParameters in class SSLEngine

getNegotiatedApplicationProtocol

public String getNegotiatedApplicationProtocol()