/* * Copyright (c) 2012, 2019, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. Oracle designates this * particular file as subject to the "Classpath" exception as provided * by Oracle in the LICENSE file that accompanied this code. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ package sun.security.ssl; import java.math.BigInteger; import java.util.*; import java.util.regex.Pattern; import javax.net.ssl.*; import sun.net.util.IPAddressUtil; import sun.security.action.GetPropertyAction; /** * A utility class to share the static methods. */ final class Utilities { private static final String indent = " "; private static final Pattern lineBreakPatern = Pattern.compile("\\r\\n|\\n|\\r"); /** * Puts {@code hostname} into the {@code serverNames} list. *

* If the {@code serverNames} does not look like a legal FQDN, it will * not be put into the returned list. *

* Note that the returned list does not allow duplicated name type. * * @return a list of {@link SNIServerName} */ static List addToSNIServerNameList( List serverNames, String hostname) { SNIHostName sniHostName = rawToSNIHostName(hostname); if (sniHostName == null) { return serverNames; } int size = serverNames.size(); List sniList = (size != 0) ? new ArrayList<>(serverNames) : new ArrayList<>(1); boolean reset = false; for (int i = 0; i < size; i++) { SNIServerName serverName = sniList.get(i); if (serverName.getType() == StandardConstants.SNI_HOST_NAME) { sniList.set(i, sniHostName); if (SSLLogger.isOn && SSLLogger.isOn("ssl")) { SSLLogger.fine( "the previous server name in SNI (" + serverName + ") was replaced with (" + sniHostName + ")"); } reset = true; break; } } if (!reset) { sniList.add(sniHostName); } return Collections.unmodifiableList(sniList); } /** * Converts string hostname to {@code SNIHostName}. *

* Note that to check whether a hostname is a valid domain name, we cannot * use the hostname resolved from name services. For virtual hosting, * multiple hostnames may be bound to the same IP address, so the hostname * resolved from name services is not always reliable. * * @param hostname * the raw hostname * @return an instance of {@link SNIHostName}, or null if the hostname does * not look like a FQDN */ private static SNIHostName rawToSNIHostName(String hostname) { SNIHostName sniHostName = null; if (hostname != null && hostname.indexOf('.') > 0 && !hostname.endsWith(".") && !IPAddressUtil.isIPv4LiteralAddress(hostname) && !IPAddressUtil.isIPv6LiteralAddress(hostname)) { try { sniHostName = new SNIHostName(hostname); } catch (IllegalArgumentException iae) { // don't bother to handle illegal host_name if (SSLLogger.isOn && SSLLogger.isOn("ssl")) { SSLLogger.fine(hostname + "\" " + "is not a legal HostName for server name indication"); } } } return sniHostName; } /** * Return the value of the boolean System property propName. * * Note use of privileged action. Do NOT make accessible to applications. */ static boolean getBooleanProperty(String propName, boolean defaultValue) { // if set, require value of either true or false String b = GetPropertyAction.privilegedGetProperty(propName); if (b == null) { return defaultValue; } else if (b.equalsIgnoreCase("false")) { return false; } else if (b.equalsIgnoreCase("true")) { return true; } else { throw new RuntimeException("Value of " + propName + " must either be 'true' or 'false'"); } } static String indent(String source) { return Utilities.indent(source, indent); } static String indent(String source, String prefix) { StringBuilder builder = new StringBuilder(); if (source == null) { builder.append("\n").append(prefix).append(""); } else { String[] lines = lineBreakPatern.split(source); boolean isFirst = true; for (String line : lines) { if (isFirst) { isFirst = false; } else { builder.append("\n"); } builder.append(prefix).append(line); } } return builder.toString(); } static String byte16HexString(int id) { Hex.Encoder encoder = Hex.encoder(); return "0x" + encoder.toHexPair(id >> 12) + encoder.toHexPair(id >> 8) + encoder.toHexPair(id >> 4) + encoder.toHexPair(id); } static String toHexString(byte[] bytes) { if (bytes == null || bytes.length == 0) { return ""; } return Hex.encoder(" ", "", "", true).encode(bytes); } static String toHexString(long lv) { final Hex.Encoder encoder = Hex.encoder(); StringBuilder builder = new StringBuilder(128); boolean isFirst = true; do { if (isFirst) { isFirst = false; } else { builder.append(' '); } encoder.encodeHexPair(builder, (int)lv); lv >>>= 8; } while (lv != 0); builder.reverse(); return builder.toString(); } /** * Utility method to convert a BigInteger to a byte array in unsigned * format as needed in the handshake messages. BigInteger uses * 2's complement format, i.e. it prepends an extra zero if the MSB * is set. We remove that. */ static byte[] toByteArray(BigInteger bi) { byte[] b = bi.toByteArray(); if ((b.length > 1) && (b[0] == 0)) { int n = b.length - 1; byte[] newarray = new byte[n]; System.arraycopy(b, 1, newarray, 0, n); b = newarray; } return b; } static void reverseBytes(byte[] arr) { int i = 0; int j = arr.length - 1; while (i < j) { swap(arr, i, j); i++; j--; } } private static void swap(byte[] arr, int i, int j) { byte tmp = arr[i]; arr[i] = arr[j]; arr[j] = tmp; } }