85 lines
2.7 KiB
85 lines
2.7 KiB
1 year ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
|
#pragma warning disable
|
||
|
|
using System;
|
||
|
|
using System.IO;
|
||
|
|
|
||
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Tls.Crypto;
|
||
|
|
|
||
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
|
||
|
|
{
|
||
|
|
/// <summary>(D)TLS RSA key exchange.</summary>
|
||
|
|
public class TlsRsaKeyExchange
|
||
|
|
: AbstractTlsKeyExchange
|
||
|
|
{
|
||
|
|
private static int CheckKeyExchange(int keyExchange)
|
||
|
|
{
|
||
|
|
switch (keyExchange)
|
||
|
|
{
|
||
|
|
case KeyExchangeAlgorithm.RSA:
|
||
|
|
return keyExchange;
|
||
|
|
default:
|
||
|
|
throw new ArgumentException("unsupported key exchange algorithm", "keyExchange");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
protected TlsCredentialedDecryptor m_serverCredentials = null;
|
||
|
|
protected TlsEncryptor m_serverEncryptor;
|
||
|
|
protected TlsSecret m_preMasterSecret;
|
||
|
|
|
||
|
|
public TlsRsaKeyExchange(int keyExchange)
|
||
|
|
: base(CheckKeyExchange(keyExchange))
|
||
|
|
{
|
||
|
|
}
|
||
|
|
|
||
|
|
public override void SkipServerCredentials()
|
||
|
|
{
|
||
|
|
throw new TlsFatalAlert(AlertDescription.internal_error);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override void ProcessServerCredentials(TlsCredentials serverCredentials)
|
||
|
|
{
|
||
|
|
this.m_serverCredentials = TlsUtilities.RequireDecryptorCredentials(serverCredentials);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override void ProcessServerCertificate(Certificate serverCertificate)
|
||
|
|
{
|
||
|
|
this.m_serverEncryptor = serverCertificate.GetCertificateAt(0).CreateEncryptor(
|
||
|
|
TlsCertificateRole.RsaEncryption);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override short[] GetClientCertificateTypes()
|
||
|
|
{
|
||
|
|
return new short[]{ ClientCertificateType.rsa_sign, ClientCertificateType.dss_sign,
|
||
|
|
ClientCertificateType.ecdsa_sign };
|
||
|
|
}
|
||
|
|
|
||
|
|
public override void ProcessClientCredentials(TlsCredentials clientCredentials)
|
||
|
|
{
|
||
|
|
TlsUtilities.RequireSignerCredentials(clientCredentials);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override void GenerateClientKeyExchange(Stream output)
|
||
|
|
{
|
||
|
|
this.m_preMasterSecret = TlsUtilities.GenerateEncryptedPreMasterSecret(m_context, m_serverEncryptor,
|
||
|
|
output);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override void ProcessClientKeyExchange(Stream input)
|
||
|
|
{
|
||
|
|
byte[] encryptedPreMasterSecret = TlsUtilities.ReadEncryptedPms(m_context, input);
|
||
|
|
|
||
|
|
this.m_preMasterSecret = m_serverCredentials.Decrypt(new TlsCryptoParameters(m_context),
|
||
|
|
encryptedPreMasterSecret);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override TlsSecret GeneratePreMasterSecret()
|
||
|
|
{
|
||
|
|
TlsSecret tmp = this.m_preMasterSecret;
|
||
|
|
this.m_preMasterSecret = null;
|
||
|
|
return tmp;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#pragma warning restore
|
||
|
|
#endif
|