Examples with SslContextFactory org.eclipse.jetty.util.ssl.SslContextFactory used on opensource projects

Example 96 with SslContextFactory

use of org.eclipse.jetty.util.ssl.SslContextFactory in project jetty.project by eclipse.

the class ALPNNegotiationTest method testGentleCloseDuringHandshake.

@Test
public void testGentleCloseDuringHandshake() throws Exception {
    InetSocketAddress address = prepare();
    SslContextFactory sslContextFactory = newSslContextFactory();
    sslContextFactory.start();
    SSLEngine sslEngine = sslContextFactory.newSSLEngine(address);
    sslEngine.setUseClientMode(true);
    ALPN.put(sslEngine, new ALPN.ClientProvider() {

        @Override
        public void unsupported() {
        }

        @Override
        public List<String> protocols() {
            return Arrays.asList("h2");
        }

        @Override
        public void selected(String protocol) {
        }
    });
    sslEngine.beginHandshake();
    ByteBuffer encrypted = ByteBuffer.allocate(sslEngine.getSession().getPacketBufferSize());
    sslEngine.wrap(BufferUtil.EMPTY_BUFFER, encrypted);
    encrypted.flip();
    try (SocketChannel channel = SocketChannel.open(address)) {
        // Send ClientHello, immediately followed by TLS Close Alert and then by FIN
        channel.write(encrypted);
        sslEngine.closeOutbound();
        encrypted.clear();
        sslEngine.wrap(BufferUtil.EMPTY_BUFFER, encrypted);
        encrypted.flip();
        channel.write(encrypted);
        channel.shutdownOutput();
        // Read ServerHello from server
        encrypted.clear();
        int read = channel.read(encrypted);
        encrypted.flip();
        Assert.assertTrue(read > 0);
        // Cannot decrypt, as the SSLEngine has been already closed
        // It may happen that the read() above read both the ServerHello and the TLS Close Alert.
        // Now if we can read more, we should read the TLS Close Alert and then the TCP FIN.
        encrypted.clear();
        read = channel.read(encrypted);
        if (read > 0) {
            encrypted.flip();
            Assert.assertEquals(21, encrypted.get());
            encrypted.clear();
            Assert.assertEquals(-1, channel.read(encrypted));
        }
    }
}

Example 97 with SslContextFactory

use of org.eclipse.jetty.util.ssl.SslContextFactory in project jetty.project by eclipse.

the class AbstractALPNTest method newSslContextFactory.

protected SslContextFactory newSslContextFactory() {
    SslContextFactory sslContextFactory = new SslContextFactory();
    sslContextFactory.setKeyStorePath("src/test/resources/keystore.jks");
    sslContextFactory.setKeyStorePassword("storepwd");
    sslContextFactory.setTrustStorePath("src/test/resources/truststore.jks");
    sslContextFactory.setTrustStorePassword("storepwd");
    sslContextFactory.setIncludeProtocols("TLSv1.2");
    // The mandatory HTTP/2 cipher.
    sslContextFactory.setIncludeCipherSuites("TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256");
    return sslContextFactory;
}

Example 98 with SslContextFactory

use of org.eclipse.jetty.util.ssl.SslContextFactory in project jetty.project by eclipse.

the class ConnectHandlerSSLTest method prepare.

@Before
public void prepare() throws Exception {
    sslContextFactory = new SslContextFactory();
    String keyStorePath = MavenTestingUtils.getTestResourceFile("keystore").getAbsolutePath();
    sslContextFactory.setKeyStorePath(keyStorePath);
    sslContextFactory.setKeyStorePassword("storepwd");
    sslContextFactory.setKeyManagerPassword("keypwd");
    server = new Server();
    serverConnector = new ServerConnector(server, sslContextFactory);
    server.addConnector(serverConnector);
    server.setHandler(new ServerHandler());
    server.start();
    prepareProxy();
}

Example 99 with SslContextFactory

use of org.eclipse.jetty.util.ssl.SslContextFactory in project jetty.project by eclipse.

the class TestOSGiUtil method newSslContextFactory.

protected static SslContextFactory newSslContextFactory() {
    SslContextFactory sslContextFactory = new SslContextFactory(true);
    sslContextFactory.setEndpointIdentificationAlgorithm("");
    return sslContextFactory;
}

Example 100 with SslContextFactory

use of org.eclipse.jetty.util.ssl.SslContextFactory in project jetty.project by eclipse.

the class SslBytesClientTest method init.

@Before
public void init() throws Exception {
    threadPool = Executors.newCachedThreadPool();
    client = new HttpClient(new SslContextFactory(true));
    client.setMaxConnectionsPerDestination(1);
    File keyStore = MavenTestingUtils.getTestResourceFile("keystore.jks");
    sslContextFactory = client.getSslContextFactory();
    sslContextFactory.setKeyStorePath(keyStore.getAbsolutePath());
    sslContextFactory.setKeyStorePassword("storepwd");
    client.start();
    SSLContext sslContext = sslContextFactory.getSslContext();
    acceptor = (SSLServerSocket) sslContext.getServerSocketFactory().createServerSocket(0);
    int serverPort = acceptor.getLocalPort();
    proxy = new SimpleProxy(threadPool, "localhost", serverPort);
    proxy.start();
    logger.info(":{} <==> :{}", proxy.getPort(), serverPort);
}