TLSManager.java

package eu.musesproject.client.connectionmanager;
/*
 * #%L
 * MUSES Client
 * %%
 * Copyright (C) 2013 - 2014 Sweden Connectivity
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */

import android.util.Log;
import org.apache.http.HttpVersion;
import org.apache.http.client.HttpClient;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.scheme.PlainSocketFactory;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.scheme.SocketFactory;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager;
import org.apache.http.params.BasicHttpParams;
import org.apache.http.params.HttpParams;
import org.apache.http.params.HttpProtocolParams;
import org.apache.http.protocol.HTTP;

import java.io.ByteArrayInputStream;
import java.io.InputStream;
import java.security.KeyStore;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;

/**
 * Handle TLS/SSL communication with the server
 * 
 * @author Yasir Ali
 * @version Jan 27, 2014
 */

public class TLSManager {
	
	
	private static final String TAG = TLSManager.class.getSimpleName();
	private static final int HTTP_PORT = 80;
	private static final int HTTPS_PORT = 8443;
	private static String certificate;
	public TLSManager(String cert) {
		certificate = cert;
	}

	/**
	 * Get HttpsClient object
	 * @return DefaultHttpClient
	 */
	
	public DefaultHttpClient getTLSHttpClient(){
		return (DefaultHttpClient) createHttpClient();
	}

	/**
	 * Create SSLFactory object using certificate saved in the device
	 * @return SSLSocketFactory
	 */
		
	private SSLSocketFactory newSslSocketFactory() {
		try {
			InputStream in = new ByteArrayInputStream(certificate.getBytes());
			KeyStore trustedStore = null;

			if (in != null){
				trustedStore = convertCerToBKS(in, "muses alias", "muses11".toCharArray());
			}
			SSLSocketFactory sf = new SSLSocketFactory(trustedStore);
			sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
			return sf;
		} catch (Exception e) {
			throw new AssertionError(e);
		}
	}
	
	
	/**
	 * Convert local certificate to BKS
	 * @param cerStream
	 * @param alias
	 * 	
	 * @param password
	 * @return keyStore
	 */
	private KeyStore convertCerToBKS(InputStream cerStream, String alias, char [] password){
	    KeyStore keyStore = null;
	    try {
	        keyStore = KeyStore.getInstance("BKS", "BC");
	        CertificateFactory factory = CertificateFactory.getInstance("X.509", "BC");
	        Certificate certificate = factory.generateCertificate(cerStream);
	        keyStore.load(null, password);
	        keyStore.setCertificateEntry(alias, certificate);
	    }
	    catch (Exception e){
	    	Log.d(TAG, e.getLocalizedMessage());
	    }
	    return keyStore;                                    
	}
	/**
	 * Sreate https client object
	 * @return DefaultHttpClient
	 */
	private HttpClient createHttpClient() {
	    HttpParams params = new BasicHttpParams();
	    HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
	    HttpProtocolParams.setContentCharset(params, HTTP.DEFAULT_CONTENT_CHARSET);
	    HttpProtocolParams.setUseExpectContinue(params, true);

	    SchemeRegistry schReg = new SchemeRegistry();
	    schReg.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), HTTP_PORT));
	    schReg.register(new Scheme("https", (SocketFactory) newSslSocketFactory(), HTTPS_PORT));
	    ClientConnectionManager conMgr = new ThreadSafeClientConnManager(params, schReg);

	    return new DefaultHttpClient(conMgr, params);
	}
	
	
	
}