JSS 3.1.1

org.mozilla.jss.ssl
Class SSLSocket

java.lang.Object
  |
  +--java.net.Socket
        |
        +--org.mozilla.jss.ssl.SSLSocket

public class SSLSocket
extends java.net.Socket

SSL client socket.


Inner Class Summary
static class SSLSocket.CipherPolicy
           
 
Field Summary
private  SocketBase base
           
private  boolean handshakeAsClient
           
private  java.util.Vector handshakeCompletedListeners
           
private  java.net.InetAddress inetAddress
           
private  boolean open
           
private  int port
           
private  SocketProxy sockProxy
           
static int SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA
           
static int SSL_RSA_FIPS_WITH_DES_CBC_SHA
           
static int SSL2_DES_192_EDE3_CBC_WITH_MD5
           
static int SSL2_DES_64_CBC_WITH_MD5
           
static int SSL2_RC2_128_CBC_EXPORT40_WITH_MD5
           
static int SSL2_RC2_128_CBC_WITH_MD5
           
static int SSL2_RC4_128_EXPORT40_WITH_MD5
           
static int SSL2_RC4_128_WITH_MD5
           
static int SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA
           
static int SSL3_FORTEZZA_DMS_WITH_NULL_SHA
           
static int SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA
           
static int SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5
           
static int SSL3_RSA_EXPORT_WITH_RC4_40_MD5
           
static int SSL3_RSA_WITH_3DES_EDE_CBC_SHA
           
static int SSL3_RSA_WITH_DES_CBC_SHA
           
static int SSL3_RSA_WITH_NULL_MD5
           
static int SSL3_RSA_WITH_RC4_128_MD5
           
static int SSL3_RSA_WITH_RC4_128_SHA
           
static int TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
           
static int TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA
           
static int TLS_DHE_DSS_WITH_RC4_128_SHA
           
static int TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
           
static int TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
           
 
Fields inherited from class java.net.Socket
factory, impl
 
Constructor Summary
(package private) SSLSocket()
          For sockets that get created by accept().
  SSLSocket(java.net.InetAddress address, int port)
          Creates an SSL client socket and connects to the specified address and port.
  SSLSocket(java.net.InetAddress address, int port, java.net.InetAddress localAddr, int localPort)
          Creates an SSL client socket and connects to the specified address and port.
  SSLSocket(java.net.InetAddress address, int port, java.net.InetAddress localAddr, int localPort, boolean stream, SSLCertificateApprovalCallback certApprovalCallback, SSLClientCertificateSelectionCallback clientCertSelectionCallback)
          Deprecated. As of JSS 3.0. The stream parameter is ignored, because only stream sockets are supported.
  SSLSocket(java.net.InetAddress address, int port, java.net.InetAddress localAddr, int localPort, SSLCertificateApprovalCallback certApprovalCallback, SSLClientCertificateSelectionCallback clientCertSelectionCallback)
          Creates an SSL client socket and connects to the specified address and port.
private SSLSocket(java.net.InetAddress address, java.lang.String hostname, int port, java.net.InetAddress localAddr, int localPort, SSLCertificateApprovalCallback certApprovalCallback, SSLClientCertificateSelectionCallback clientCertSelectionCallback)
           
  SSLSocket(java.lang.String host, int port)
          Creates an SSL client socket and connects to the specified host and port.
  SSLSocket(java.lang.String host, int port, java.net.InetAddress localAddr, int localPort)
          Creates an SSL client socket and connects to the specified host and port.
  SSLSocket(java.lang.String host, int port, java.net.InetAddress localAddr, int localPort, SSLCertificateApprovalCallback certApprovalCallback, SSLClientCertificateSelectionCallback clientCertSelectionCallback)
          Creates an SSL client socket and connects to the specified host and port.
 
Method Summary
 void addHandshakeCompletedListener(SSLHandshakeCompletedListener l)
          Adds a listener to be notified when an SSL handshake completes.
 void close()
          Closes this socket.
 void enableSSL2(boolean enable)
          Enables SSL v2 on this socket.
static void enableSSL2Default(boolean enable)
          Sets the default for SSL v2 for all new sockets.
 void enableSSL3(boolean enable)
          Enables SSL v3 on this socket.
static void enableSSL3Default(boolean enable)
          Sets the default for SSL v2 for all new sockets.
protected  void finalize()
           
 void forceHandshake()
          Force an already started SSL handshake to complete.
 java.net.InetAddress getInetAddress()
           
 java.io.InputStream getInputStream()
          Returns the input stream for reading from this socket.
 boolean getKeepAlive()
          Returns the current setting of the SO_KEEPALIVE socket option.
 java.net.InetAddress getLocalAddress()
           
private  int getLocalAddressNative()
           
 int getLocalPort()
           
 java.io.OutputStream getOutputStream()
          Returns the output stream for writing to this socket.
 int getPort()
           
 int getReceiveBufferSize()
          Returnst he size (in bytes) of the receive buffer.
 int getSendBufferSize()
          Returns the size (in bytes) of the send buffer.
 int getSoLinger()
          Returns the current value of the SO_LINGER socket option.
 int getSoTimeout()
          Returns the current value of the SO_TIMEOUT socket option.
 SSLSecurityStatus getStatus()
          Returns the security status of this socket.
 boolean getTcpNoDelay()
          Returns the current setting of the TCP_NO_DELAY socket option.
 boolean getUseClientMode()
           
 void invalidateSession()
          Removes the current session from the session cache.
private  void notifyAllHandshakeListeners()
           
(package private)  int read(byte[] b, int off, int len)
           
 void redoHandshake()
          Causes SSL to begin a full, new SSL 3.0 handshake from scratch on a connection that has already completed one handshake.
 void redoHandshake(boolean flushCache)
          Causes SSL to begin a full, new SSL 3.0 handshake from scratch on a connection that has already completed one handshake.
 void removeHandshakeCompletedListener(SSLHandshakeCompletedListener l)
          Removes a previously registered listener for handshake completion.
 void requestClientAuth(boolean b)
          Enables/disables the request of client authentication.
 void requireClientAuth(boolean require, boolean onRedo)
          Sets whether the socket requires client authentication from the remote peer.
 void requireClientAuthDefault(boolean require, boolean onRedo)
          Sets the default setting for requiring client authorization.
 void resetHandshake()
          Resets the handshake state.
private  void resetHandshakeNative(boolean asClient)
           
static void setCipherPolicy(SSLSocket.CipherPolicy cp)
          Sets the SSL cipher policy.
private static void setCipherPolicyNative(int policyEnum)
           
static void setCipherPreference(int cipher, boolean enable)
          Enables/disables the given cipher on this socket.
 void setClientCertNickname(java.lang.String nick)
          Sets the nickname of the certificate to use for client authentication.
 void setKeepAlive(boolean on)
          Enables or disables the SO_KEEPALIVE socket option.
 void setNeedClientAuth(boolean b)
          Deprecated. As of JSS 3.0. This method is misnamed. Use requestClientAuth instead.
 void setNeedClientAuthNoExpiryCheck(boolean b)
          Deprecated. As of JSS 3.0. This method is misnamed. Use requestClientAuthNoExpiryCheck instead.
 void setReceiveBufferSize(int size)
          Sets the size (in bytes) of the receive buffer.
 void setSendBufferSize(int size)
          Sets the size (in bytes) of the send buffer.
(package private)  void setSockProxy(SocketProxy sp)
          Should only be called by SSLServerSocket after a successful accept().
 void setSoLinger(boolean on, int linger)
          Sets the SO_LINGER socket option.
 void setSoTimeout(int timeout)
          Sets the SO_TIMEOUT socket option.
private static void setSSLDefaultOption(int option, boolean on)
           
private static void setSSLDefaultOption(int option, int on)
           
 void setTcpNoDelay(boolean on)
          Enables or disables the TCP_NO_DELAY socket option.
 void setUseClientMode(boolean b)
          Determines whether this end of the socket is the client or the server for purposes of the SSL protocol.
 void shutdownInput()
          Shuts down the input side of the socket.
private  void shutdownNative(int how)
           
 void shutdownOutput()
          Shuts down the output side of the socket.
(package private)  int socketAvailable()
           
private  void socketConnect(byte[] addr, java.lang.String hostname, int port)
           
private  int socketRead(byte[] b, int off, int len, int timeout)
           
private  void socketWrite(byte[] b, int off, int len, int timeout)
           
 void useCache(boolean b)
          Enables/disables the session cache.
 void useCacheDefault(boolean b)
          Sets the default setting for use of the session cache.
(package private)  void write(byte[] b, int off, int len)
           
 
Methods inherited from class java.net.Socket
setSocketImplFactory, toString
 
Methods inherited from class java.lang.Object
, clone, equals, getClass, hashCode, notify, notifyAll, registerNatives, wait, wait, wait
 

Field Detail

handshakeCompletedListeners

private java.util.Vector handshakeCompletedListeners

inetAddress

private java.net.InetAddress inetAddress

port

private int port

sockProxy

private SocketProxy sockProxy

open

private boolean open

handshakeAsClient

private boolean handshakeAsClient

base

private SocketBase base

SSL2_RC4_128_WITH_MD5

public static final int SSL2_RC4_128_WITH_MD5

SSL2_RC4_128_EXPORT40_WITH_MD5

public static final int SSL2_RC4_128_EXPORT40_WITH_MD5

SSL2_RC2_128_CBC_WITH_MD5

public static final int SSL2_RC2_128_CBC_WITH_MD5

SSL2_RC2_128_CBC_EXPORT40_WITH_MD5

public static final int SSL2_RC2_128_CBC_EXPORT40_WITH_MD5

SSL2_DES_64_CBC_WITH_MD5

public static final int SSL2_DES_64_CBC_WITH_MD5

SSL2_DES_192_EDE3_CBC_WITH_MD5

public static final int SSL2_DES_192_EDE3_CBC_WITH_MD5

SSL3_RSA_WITH_NULL_MD5

public static final int SSL3_RSA_WITH_NULL_MD5

SSL3_RSA_EXPORT_WITH_RC4_40_MD5

public static final int SSL3_RSA_EXPORT_WITH_RC4_40_MD5

SSL3_RSA_WITH_RC4_128_MD5

public static final int SSL3_RSA_WITH_RC4_128_MD5

SSL3_RSA_WITH_RC4_128_SHA

public static final int SSL3_RSA_WITH_RC4_128_SHA

SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5

public static final int SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5

SSL3_RSA_WITH_DES_CBC_SHA

public static final int SSL3_RSA_WITH_DES_CBC_SHA

SSL3_RSA_WITH_3DES_EDE_CBC_SHA

public static final int SSL3_RSA_WITH_3DES_EDE_CBC_SHA

SSL3_FORTEZZA_DMS_WITH_NULL_SHA

public static final int SSL3_FORTEZZA_DMS_WITH_NULL_SHA

SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA

public static final int SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA

SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA

public static final int SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA

SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA

public static final int SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA

SSL_RSA_FIPS_WITH_DES_CBC_SHA

public static final int SSL_RSA_FIPS_WITH_DES_CBC_SHA

TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA

public static final int TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA

TLS_RSA_EXPORT1024_WITH_RC4_56_SHA

public static final int TLS_RSA_EXPORT1024_WITH_RC4_56_SHA

TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA

public static final int TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA

TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA

public static final int TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA

TLS_DHE_DSS_WITH_RC4_128_SHA

public static final int TLS_DHE_DSS_WITH_RC4_128_SHA
Constructor Detail

SSLSocket

SSLSocket()
    throws java.io.IOException
For sockets that get created by accept().

SSLSocket

public SSLSocket(java.lang.String host,
                 int port)
          throws java.net.UnknownHostException,
                 java.io.IOException
Creates an SSL client socket and connects to the specified host and port.
Parameters:
host - The hostname to connect to.
port - The port to connect to.

SSLSocket

public SSLSocket(java.net.InetAddress address,
                 int port)
          throws java.io.IOException
Creates an SSL client socket and connects to the specified address and port.
Parameters:
address - The IP address to connect to.
port - The port to connect to.

SSLSocket

public SSLSocket(java.lang.String host,
                 int port,
                 java.net.InetAddress localAddr,
                 int localPort)
          throws java.io.IOException
Creates an SSL client socket and connects to the specified host and port. Binds to the given local address and port.
Parameters:
host - The hostname to connect to.
port - The port to connect to.
localAddr - The local address to bind to. It can be null, in which case an unspecified local address will be chosen.
localPort - The local port to bind to. If 0, a random port will be assigned to the socket.

SSLSocket

public SSLSocket(java.net.InetAddress address,
                 int port,
                 java.net.InetAddress localAddr,
                 int localPort)
          throws java.io.IOException
Creates an SSL client socket and connects to the specified address and port. Binds to the given local address and port.
Parameters:
address - The IP address to connect to.
port - The port to connect to.
localAddr - The local address to bind to. It can be null, in which case an unspecified local address will be chosen.
localPort - The local port to bind to. If 0, a random port will be assigned to the socket.

SSLSocket

public SSLSocket(java.lang.String host,
                 int port,
                 java.net.InetAddress localAddr,
                 int localPort,
                 SSLCertificateApprovalCallback certApprovalCallback,
                 SSLClientCertificateSelectionCallback clientCertSelectionCallback)
          throws java.io.IOException
Creates an SSL client socket and connects to the specified host and port. Binds to the given local address and port. Installs the given callbacks for certificate approval and client certificate selection.
Parameters:
host - The hostname to connect to.
port - The port to connect to.
localAddr - The local address to bind to. It can be null, in which case an unspecified local address will be chosen.
localPort - The local port to bind to. If 0, a random port will be assigned to the socket.
certApprovalCallback - A callback that can be used to override approval of the peer's certificate.
clientCertSelectionCallback - A callback to select the client certificate to present to the peer.

SSLSocket

public SSLSocket(java.net.InetAddress address,
                 int port,
                 java.net.InetAddress localAddr,
                 int localPort,
                 boolean stream,
                 SSLCertificateApprovalCallback certApprovalCallback,
                 SSLClientCertificateSelectionCallback clientCertSelectionCallback)
          throws java.io.IOException
Deprecated. As of JSS 3.0. The stream parameter is ignored, because only stream sockets are supported.

Creates an SSL client socket and connects to the specified host and port. Binds to the given local address and port. Installs the given callbacks for certificate approval and client certificate selection.
Parameters:
host - The hostname to connect to.
port - The port to connect to.
localAddr - The local address to bind to. It can be null, in which case an unspecified local address will be chosen.
localPort - The local port to bind to. If 0, a random port will be assigned to the socket.
stream - This parameter is ignored. All SSLSockets are stream sockets.
certApprovalCallback - A callback that can be used to override approval of the peer's certificate.
clientCertSelectionCallback - A callback to select the client certificate to present to the peer.

SSLSocket

public SSLSocket(java.net.InetAddress address,
                 int port,
                 java.net.InetAddress localAddr,
                 int localPort,
                 SSLCertificateApprovalCallback certApprovalCallback,
                 SSLClientCertificateSelectionCallback clientCertSelectionCallback)
          throws java.io.IOException
Creates an SSL client socket and connects to the specified address and port. Binds to the given local address and port. Installs the given callbacks for certificate approval and client certificate selection.
Parameters:
address - The IP address to connect to.
port - The port to connect to.
localAddr - The local address to bind to. It can be null, in which case an unspecified local address will be chosen.
localPort - The local port to bind to. If 0, a random port will be assigned to the socket.
certApprovalCallback - A callback that can be used to override approval of the peer's certificate.
clientCertSelectionCallback - A callback to select the client certificate to present to the peer.

SSLSocket

private SSLSocket(java.net.InetAddress address,
                  java.lang.String hostname,
                  int port,
                  java.net.InetAddress localAddr,
                  int localPort,
                  SSLCertificateApprovalCallback certApprovalCallback,
                  SSLClientCertificateSelectionCallback clientCertSelectionCallback)
           throws java.io.IOException
Method Detail

setSockProxy

void setSockProxy(SocketProxy sp)
Should only be called by SSLServerSocket after a successful accept().

getInetAddress

public java.net.InetAddress getInetAddress()
Overrides:
getInetAddress in class java.net.Socket
Returns:
The remote peer's IP address.

getLocalAddress

public java.net.InetAddress getLocalAddress()
Overrides:
getLocalAddress in class java.net.Socket
Returns:
The local IP address.

getLocalAddressNative

private int getLocalAddressNative()
                           throws java.net.SocketException

getLocalPort

public int getLocalPort()
Overrides:
getLocalPort in class java.net.Socket
Returns:
The local port.

getPort

public int getPort()
Overrides:
getPort in class java.net.Socket
Returns:
The remote port.

getInputStream

public java.io.InputStream getInputStream()
                                   throws java.io.IOException
Returns the input stream for reading from this socket.
Overrides:
getInputStream in class java.net.Socket

getOutputStream

public java.io.OutputStream getOutputStream()
                                     throws java.io.IOException
Returns the output stream for writing to this socket.
Overrides:
getOutputStream in class java.net.Socket

setTcpNoDelay

public void setTcpNoDelay(boolean on)
                   throws java.net.SocketException
Enables or disables the TCP_NO_DELAY socket option. Enabling this option will disable the Nagle algorithm.
Overrides:
setTcpNoDelay in class java.net.Socket

getTcpNoDelay

public boolean getTcpNoDelay()
                      throws java.net.SocketException
Returns the current setting of the TCP_NO_DELAY socket option.
Overrides:
getTcpNoDelay in class java.net.Socket

setKeepAlive

public void setKeepAlive(boolean on)
                  throws java.net.SocketException
Enables or disables the SO_KEEPALIVE socket option.
Overrides:
setKeepAlive in class java.net.Socket

getKeepAlive

public boolean getKeepAlive()
                     throws java.net.SocketException
Returns the current setting of the SO_KEEPALIVE socket option.
Overrides:
getKeepAlive in class java.net.Socket

shutdownInput

public void shutdownInput()
                   throws java.io.IOException
Shuts down the input side of the socket.
Overrides:
shutdownInput in class java.net.Socket

shutdownOutput

public void shutdownOutput()
                    throws java.io.IOException
Shuts down the output side of the socket.
Overrides:
shutdownOutput in class java.net.Socket

shutdownNative

private void shutdownNative(int how)
                     throws java.io.IOException

setSoLinger

public void setSoLinger(boolean on,
                        int linger)
                 throws java.net.SocketException
Sets the SO_LINGER socket option. param linger The time (in hundredths of a second) to linger for.
Overrides:
setSoLinger in class java.net.Socket

getSoLinger

public int getSoLinger()
                throws java.net.SocketException
Returns the current value of the SO_LINGER socket option.
Overrides:
getSoLinger in class java.net.Socket

setSoTimeout

public void setSoTimeout(int timeout)
                  throws java.net.SocketException
Sets the SO_TIMEOUT socket option.
Overrides:
setSoTimeout in class java.net.Socket

getSoTimeout

public int getSoTimeout()
                 throws java.net.SocketException
Returns the current value of the SO_TIMEOUT socket option.
Overrides:
getSoTimeout in class java.net.Socket

setSendBufferSize

public void setSendBufferSize(int size)
                       throws java.net.SocketException
Sets the size (in bytes) of the send buffer.
Overrides:
setSendBufferSize in class java.net.Socket

getSendBufferSize

public int getSendBufferSize()
                      throws java.net.SocketException
Returns the size (in bytes) of the send buffer.
Overrides:
getSendBufferSize in class java.net.Socket

setReceiveBufferSize

public void setReceiveBufferSize(int size)
                          throws java.net.SocketException
Sets the size (in bytes) of the receive buffer.
Overrides:
setReceiveBufferSize in class java.net.Socket

getReceiveBufferSize

public int getReceiveBufferSize()
                         throws java.net.SocketException
Returnst he size (in bytes) of the receive buffer.
Overrides:
getReceiveBufferSize in class java.net.Socket

close

public void close()
           throws java.io.IOException
Closes this socket.
Overrides:
close in class java.net.Socket

socketConnect

private void socketConnect(byte[] addr,
                           java.lang.String hostname,
                           int port)
                    throws java.net.SocketException

addHandshakeCompletedListener

public void addHandshakeCompletedListener(SSLHandshakeCompletedListener l)
Adds a listener to be notified when an SSL handshake completes.

removeHandshakeCompletedListener

public void removeHandshakeCompletedListener(SSLHandshakeCompletedListener l)
Removes a previously registered listener for handshake completion.

notifyAllHandshakeListeners

private void notifyAllHandshakeListeners()

enableSSL2

public void enableSSL2(boolean enable)
                throws java.net.SocketException
Enables SSL v2 on this socket. It is enabled by default, unless the default has been changed with enableSSL2Default.

enableSSL2Default

public static void enableSSL2Default(boolean enable)
                              throws java.net.SocketException
Sets the default for SSL v2 for all new sockets.

enableSSL3

public void enableSSL3(boolean enable)
                throws java.net.SocketException
Enables SSL v3 on this socket. It is enabled by default, unless the default has been changed with enableSSL3Default.

enableSSL3Default

public static void enableSSL3Default(boolean enable)
                              throws java.net.SocketException
Sets the default for SSL v2 for all new sockets.

requireClientAuth

public void requireClientAuth(boolean require,
                              boolean onRedo)
                       throws java.net.SocketException
Sets whether the socket requires client authentication from the remote peer. If requestClientAuth() has not already been called, this method will tell the socket to request client auth as well as requiring it.

requireClientAuthDefault

public void requireClientAuthDefault(boolean require,
                                     boolean onRedo)
                              throws java.net.SocketException
Sets the default setting for requiring client authorization. All subsequently created sockets will use this default setting.

forceHandshake

public void forceHandshake()
                    throws java.net.SocketException
Force an already started SSL handshake to complete. This method should block until the handshake has completed.

setUseClientMode

public void setUseClientMode(boolean b)
Determines whether this end of the socket is the client or the server for purposes of the SSL protocol. By default, it is the client.
Parameters:
b - true if this end of the socket is the SSL slient, false if it is the SSL server.

getUseClientMode

public boolean getUseClientMode()
Returns:
true if this end of the socket is the SSL client, false if it is the SSL server.

resetHandshake

public void resetHandshake()
                    throws java.net.SocketException
Resets the handshake state.

resetHandshakeNative

private void resetHandshakeNative(boolean asClient)
                           throws java.net.SocketException

getStatus

public SSLSecurityStatus getStatus()
                            throws java.net.SocketException
Returns the security status of this socket.

setClientCertNickname

public void setClientCertNickname(java.lang.String nick)
                           throws java.net.SocketException
Sets the nickname of the certificate to use for client authentication.

requestClientAuth

public void requestClientAuth(boolean b)
                       throws java.net.SocketException
Enables/disables the request of client authentication. This is only meaningful for the server end of the SSL connection. During the next handshake, the remote peer will be asked to authenticate itself.
See Also:
requireClientAuth(boolean, boolean)

setNeedClientAuth

public void setNeedClientAuth(boolean b)
                       throws java.net.SocketException
Deprecated. As of JSS 3.0. This method is misnamed. Use requestClientAuth instead.


setNeedClientAuthNoExpiryCheck

public void setNeedClientAuthNoExpiryCheck(boolean b)
                                    throws java.net.SocketException
Deprecated. As of JSS 3.0. This method is misnamed. Use requestClientAuthNoExpiryCheck instead.

Enables/disables the request of client authentication. This is only meaningful for the server end of the SSL connection. During the next handshake, the remote peer will be asked to authenticate itself.

In addition, the client certificate's expiration will not prevent it from being accepted.

See Also:
public void requestClientAuthNoExpiryCheck(boolean b) throws SocketException { base.requestClientAuthNoExpiryCheck(b); } /**

useCache

public void useCache(boolean b)
              throws java.net.SocketException
Enables/disables the session cache. By default, the session cache is enabled.

useCacheDefault

public void useCacheDefault(boolean b)
                     throws java.net.SocketException
Sets the default setting for use of the session cache.

setSSLDefaultOption

private static void setSSLDefaultOption(int option,
                                        boolean on)
                                 throws java.net.SocketException

setSSLDefaultOption

private static void setSSLDefaultOption(int option,
                                        int on)
                                 throws java.net.SocketException

setCipherPreference

public static void setCipherPreference(int cipher,
                                       boolean enable)
Enables/disables the given cipher on this socket.

socketAvailable

int socketAvailable()
              throws java.io.IOException

read

int read(byte[] b,
         int off,
         int len)
   throws java.io.IOException

write

void write(byte[] b,
           int off,
           int len)
     throws java.io.IOException

socketRead

private int socketRead(byte[] b,
                       int off,
                       int len,
                       int timeout)
                throws java.io.IOException

socketWrite

private void socketWrite(byte[] b,
                         int off,
                         int len,
                         int timeout)
                  throws java.io.IOException

invalidateSession

public void invalidateSession()
                       throws java.net.SocketException
Removes the current session from the session cache.

redoHandshake

public void redoHandshake()
                   throws java.net.SocketException
Causes SSL to begin a full, new SSL 3.0 handshake from scratch on a connection that has already completed one handshake.

Does not flush the SSL3 cache entry first, so a full handshake will not take place. Instead only the symmetric session keys will be regenerated.


redoHandshake

public void redoHandshake(boolean flushCache)
                   throws java.net.SocketException
Causes SSL to begin a full, new SSL 3.0 handshake from scratch on a connection that has already completed one handshake.
Parameters:
flushCache - If true, this session will be flushed from the cache. This will force a complete SSL handshake with a private key operation. If false, only the session key will be regenerated.

finalize

protected void finalize()
                 throws java.lang.Throwable
Overrides:
finalize in class java.lang.Object

setCipherPolicy

public static void setCipherPolicy(SSLSocket.CipherPolicy cp)
                            throws java.net.SocketException
Sets the SSL cipher policy. This must be called before creating any SSL sockets.

setCipherPolicyNative

private static void setCipherPolicyNative(int policyEnum)
                                   throws java.net.SocketException

JSS 3.1.1