org.owasp.dependencycheck.utils

Class SSLSocketFactoryEx

java.lang.Object

javax.net.SocketFactory

javax.net.ssl.SSLSocketFactory

org.owasp.dependencycheck.utils.SSLSocketFactoryEx

public class SSLSocketFactoryEx
extends SSLSocketFactory

This class is used to enable additional ciphers used by the SSL Socket. This is specifically because the NVD stopped supporting TLS 1.0 and Java 6 and 7 clients by default were unable to connect to download the NVD data feeds. The following code was copied from http://stackoverflow.com/questions/1037590/which-cipher-suites-to-enable-for-ssl-socket/23365536#23365536

Author:

jww

Constructor Summary

Constructors

Constructor and Description
SSLSocketFactoryEx(KeyManager[] km, TrustManager[] tm, SecureRandom random, Settings settings) Constructs a new SSLSocketFactory.
SSLSocketFactoryEx(Settings settings) Constructs a new SSLSocketFactory.
SSLSocketFactoryEx(SSLContext ctx, Settings settings) Constructs a new SSLSocketFactory.

Method Summary

Modifier and Type	Method and Description
Socket	createSocket(InetAddress host, int port) Creates a new SSL Socket.
Socket	createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) Creates a new SSL Socket.
Socket	createSocket(Socket s, String host, int port, boolean autoClose) Creates an SSL Socket.
Socket	createSocket(String host, int port) Creates a new SSL Socket.
Socket	createSocket(String host, int port, InetAddress localHost, int localPort) Creates a new SSL Socket.
String[]	getDefaultCipherSuites() Returns the default cipher suites.
String[]	getDefaultProtocols() Returns the default protocols.
protected String[]	getProtocolList() Returns the protocol list.
String[]	getSupportedCipherSuites() Returns the supported cipher suites.
String[]	getSupportedProtocols() Returns the supported protocols.

Methods inherited from class javax.net.ssl.SSLSocketFactory

createSocket, getDefault

Methods inherited from class javax.net.SocketFactory

createSocket

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SSLSocketFactoryEx

public SSLSocketFactoryEx(Settings settings)
                   throws NoSuchAlgorithmException,
                          KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

settings - reference to the configured settings

Throws:

NoSuchAlgorithmException - thrown when an algorithm is not supported

KeyManagementException - thrown if initialization fails

SSLSocketFactoryEx

public SSLSocketFactoryEx(KeyManager[] km,
                          TrustManager[] tm,
                          SecureRandom random,
                          Settings settings)
                   throws NoSuchAlgorithmException,
                          KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

km - the key manager

tm - the trust manager

random - secure random

settings - reference to the configured settings

Throws:

NoSuchAlgorithmException - thrown when an algorithm is not supported

KeyManagementException - thrown if initialization fails

SSLSocketFactoryEx

public SSLSocketFactoryEx(SSLContext ctx,
                          Settings settings)
                   throws NoSuchAlgorithmException,
                          KeyManagementException

Constructs a new SSLSocketFactory.

Parameters:

ctx - the SSL context

settings - reference to the configured settings

Throws:

NoSuchAlgorithmException - thrown when an algorithm is not supported

KeyManagementException - thrown if initialization fails

Method Detail

getDefaultCipherSuites

public String[] getDefaultCipherSuites()

Returns the default cipher suites.

Specified by:

getDefaultCipherSuites in class SSLSocketFactory

Returns:

the default cipher suites

getSupportedCipherSuites

public String[] getSupportedCipherSuites()

Returns the supported cipher suites.

Specified by:

getSupportedCipherSuites in class SSLSocketFactory

Returns:

the supported cipher suites

getDefaultProtocols

public String[] getDefaultProtocols()

Returns the default protocols.

Returns:

the default protocols

getSupportedProtocols

public String[] getSupportedProtocols()

Returns the supported protocols.

Returns:

the supported protocols

createSocket

public Socket createSocket(Socket s,
                           String host,
                           int port,
                           boolean autoClose)
                    throws IOException

Creates an SSL Socket.

Specified by:

createSocket in class SSLSocketFactory

Parameters:

s - the base socket

host - the host

port - the port

autoClose - if the socket should auto-close

Returns:

the SSL Socket

Throws:

IOException - thrown if the creation fails

createSocket

public Socket createSocket(InetAddress address,
                           int port,
                           InetAddress localAddress,
                           int localPort)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Parameters:

address - the address to connect to

port - the port number

localAddress - the local address

localPort - the local port

Returns:

the SSL Socket

Throws:

IOException - thrown if the creation fails

createSocket

public Socket createSocket(String host,
                           int port,
                           InetAddress localHost,
                           int localPort)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Parameters:

host - the host to connect to

port - the port to connect to

localHost - the local host

localPort - the local port

Returns:

the SSL Socket

Throws:

IOException - thrown if the creation fails

createSocket

public Socket createSocket(InetAddress host,
                           int port)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Parameters:

host - the host to connect to

port - the port to connect to

Returns:

the SSL Socket

Throws:

IOException - thrown if the creation fails

createSocket

public Socket createSocket(String host,
                           int port)
                    throws IOException

Creates a new SSL Socket.

Specified by:

createSocket in class SocketFactory

Parameters:

host - the host to connect to

port - the port to connect to

Returns:

the SSL Socket

Throws:

IOException - thrown if the creation fails

getProtocolList

protected String[] getProtocolList()

Returns the protocol list.

Returns:

the protocol list