You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
65 lines
2.0 KiB
65 lines
2.0 KiB
1 year ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
|
#pragma warning disable
|
||
|
|
using System;
|
||
|
|
using System.IO;
|
||
|
|
|
||
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Tls.Crypto;
|
||
|
|
|
||
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
|
||
|
|
{
|
||
|
|
public class PskTlsClient
|
||
|
|
: AbstractTlsClient
|
||
|
|
{
|
||
|
|
private static readonly int[] DefaultCipherSuites = new int[]
|
||
|
|
{
|
||
|
|
CipherSuite.TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256,
|
||
|
|
CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
|
||
|
|
CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,
|
||
|
|
CipherSuite.TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256,
|
||
|
|
CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,
|
||
|
|
CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,
|
||
|
|
CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA
|
||
|
|
};
|
||
|
|
|
||
|
|
protected readonly TlsPskIdentity m_pskIdentity;
|
||
|
|
|
||
|
|
public PskTlsClient(TlsCrypto crypto, byte[] identity, byte[] psk)
|
||
|
|
: this(crypto, new BasicTlsPskIdentity(identity, psk))
|
||
|
|
{
|
||
|
|
}
|
||
|
|
|
||
|
|
public PskTlsClient(TlsCrypto crypto, TlsPskIdentity pskIdentity)
|
||
|
|
: base(crypto)
|
||
|
|
{
|
||
|
|
this.m_pskIdentity = pskIdentity;
|
||
|
|
}
|
||
|
|
|
||
|
|
protected override ProtocolVersion[] GetSupportedVersions()
|
||
|
|
{
|
||
|
|
return ProtocolVersion.TLSv12.DownTo(ProtocolVersion.TLSv10);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected override int[] GetSupportedCipherSuites()
|
||
|
|
{
|
||
|
|
return TlsUtilities.GetSupportedCipherSuites(Crypto, DefaultCipherSuites);
|
||
|
|
}
|
||
|
|
|
||
|
|
public override TlsPskIdentity GetPskIdentity()
|
||
|
|
{
|
||
|
|
return m_pskIdentity;
|
||
|
|
}
|
||
|
|
|
||
|
|
/// <exception cref="IOException"/>
|
||
|
|
public override TlsAuthentication GetAuthentication()
|
||
|
|
{
|
||
|
|
/*
|
||
|
|
* Note: This method is not called unless a server certificate is sent, which may be the
|
||
|
|
* case e.g. for RSA_PSK key exchange.
|
||
|
|
*/
|
||
|
|
throw new TlsFatalAlert(AlertDescription.internal_error);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#pragma warning restore
|
||
|
|
#endif
|