package org.bouncycastle.tls.test;
import java.io.IOException;
import java.io.PrintStream;
import java.security.SecureRandom;
import java.util.Vector;
import org.bouncycastle.asn1.x509.Certificate;
import org.bouncycastle.tls.AlertDescription;
import org.bouncycastle.tls.AlertLevel;
import org.bouncycastle.tls.CertificateRequest;
import org.bouncycastle.tls.ChannelBinding;
import org.bouncycastle.tls.ClientCertificateType;
import org.bouncycastle.tls.DefaultTlsServer;
import org.bouncycastle.tls.ProtocolVersion;
import org.bouncycastle.tls.SignatureAlgorithm;
import org.bouncycastle.tls.TlsCredentialedDecryptor;
import org.bouncycastle.tls.TlsCredentialedSigner;
import org.bouncycastle.tls.TlsFatalAlert;
import org.bouncycastle.tls.TlsUtils;
import org.bouncycastle.tls.crypto.TlsCertificate;
import org.bouncycastle.tls.crypto.impl.bc.BcTlsCrypto;
import org.bouncycastle.util.encoders.Hex;
class MockTlsServer
extends DefaultTlsServer
{
MockTlsServer()
{
super(new BcTlsCrypto(new SecureRandom()));
}
public void notifyAlertRaised(short alertLevel, short alertDescription, String message, Throwable cause)
{
PrintStream out = (alertLevel == AlertLevel.fatal) ? System.err : System.out;
out.println("TLS server raised alert: " + AlertLevel.getText(alertLevel)
+ ", " + AlertDescription.getText(alertDescription));
if (message != null)
{
out.println("> " + message);
}
if (cause != null)
{
cause.printStackTrace(out);
}
}
public void notifyAlertReceived(short alertLevel, short alertDescription)
{
PrintStream out = (alertLevel == AlertLevel.fatal) ? System.err : System.out;
out.println("TLS server received alert: " + AlertLevel.getText(alertLevel)
+ ", " + AlertDescription.getText(alertDescription));
}
public ProtocolVersion getServerVersion() throws IOException
{
ProtocolVersion serverVersion = super.getServerVersion();
System.out.println("TLS server negotiated " + serverVersion);
return serverVersion;
}
public CertificateRequest getCertificateRequest() throws IOException
{
short[] certificateTypes = new short[]{ ClientCertificateType.rsa_sign,
ClientCertificateType.dss_sign, ClientCertificateType.ecdsa_sign };
Vector serverSigAlgs = null;
if (TlsUtils.isSignatureAlgorithmsExtensionAllowed(serverVersion))
{
serverSigAlgs = TlsUtils.getDefaultSupportedSignatureAlgorithms(context);
}
Vector certificateAuthorities = new Vector();
certificateAuthorities.addElement(TlsTestUtils.loadBcCertificateResource("x509-ca.pem").getSubject());
return new CertificateRequest(certificateTypes, serverSigAlgs, certificateAuthorities);
}
public void notifyClientCertificate(org.bouncycastle.tls.Certificate clientCertificate)
throws IOException
{
TlsCertificate[] chain = clientCertificate.getCertificateList();
System.out.println("TLS server received client certificate chain of length " + chain.length);
for (int i = 0; i != chain.length; i++)
{
Certificate entry = Certificate.getInstance(chain[i].getEncoded());
// TODO Create fingerprint based on certificate signature algorithm digest
System.out.println(" fingerprint:SHA-256 " + TlsTestUtils.fingerprint(entry) + " ("
+ entry.getSubject() + ")");
}
boolean isEmpty = (clientCertificate == null || clientCertificate.isEmpty());
if (!isEmpty && !TlsTestUtils.isCertificateOneOf(context.getCrypto(), chain[0],
new String[]{ "x509-client.pem", "x509-client-dsa.pem", "x509-client-ecdsa.pem"}))
{
throw new TlsFatalAlert(AlertDescription.bad_certificate);
}
}
public void notifyHandshakeComplete() throws IOException
{
super.notifyHandshakeComplete();
byte[] tlsUnique = context.exportChannelBinding(ChannelBinding.tls_unique);
System.out.println("'tls-unique': " + Hex.toHexString(tlsUnique));
}
protected TlsCredentialedDecryptor getRSAEncryptionCredentials()
throws IOException
{
return TlsTestUtils.loadEncryptionCredentials(context, new String[]{"x509-server.pem", "x509-ca.pem"},
"x509-server-key.pem");
}
protected TlsCredentialedSigner getRSASignerCredentials() throws IOException
{
return TlsTestUtils.loadSignerCredentials(context, supportedSignatureAlgorithms, SignatureAlgorithm.rsa,
"x509-server.pem", "x509-server-key.pem");
}
}