培训考核三期,新版培训,网页版培训登录器
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 

84 lines
2.7 KiB

#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
#pragma warning disable
using System;
using System.IO;
using BestHTTP.SecureProtocol.Org.BouncyCastle.Tls.Crypto;
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
{
/// <summary>(D)TLS RSA key exchange.</summary>
public class TlsRsaKeyExchange
: AbstractTlsKeyExchange
{
private static int CheckKeyExchange(int keyExchange)
{
switch (keyExchange)
{
case KeyExchangeAlgorithm.RSA:
return keyExchange;
default:
throw new ArgumentException("unsupported key exchange algorithm", "keyExchange");
}
}
protected TlsCredentialedDecryptor m_serverCredentials = null;
protected TlsEncryptor m_serverEncryptor;
protected TlsSecret m_preMasterSecret;
public TlsRsaKeyExchange(int keyExchange)
: base(CheckKeyExchange(keyExchange))
{
}
public override void SkipServerCredentials()
{
throw new TlsFatalAlert(AlertDescription.internal_error);
}
public override void ProcessServerCredentials(TlsCredentials serverCredentials)
{
this.m_serverCredentials = TlsUtilities.RequireDecryptorCredentials(serverCredentials);
}
public override void ProcessServerCertificate(Certificate serverCertificate)
{
this.m_serverEncryptor = serverCertificate.GetCertificateAt(0).CreateEncryptor(
TlsCertificateRole.RsaEncryption);
}
public override short[] GetClientCertificateTypes()
{
return new short[]{ ClientCertificateType.rsa_sign, ClientCertificateType.dss_sign,
ClientCertificateType.ecdsa_sign };
}
public override void ProcessClientCredentials(TlsCredentials clientCredentials)
{
TlsUtilities.RequireSignerCredentials(clientCredentials);
}
public override void GenerateClientKeyExchange(Stream output)
{
this.m_preMasterSecret = TlsUtilities.GenerateEncryptedPreMasterSecret(m_context, m_serverEncryptor,
output);
}
public override void ProcessClientKeyExchange(Stream input)
{
byte[] encryptedPreMasterSecret = TlsUtilities.ReadEncryptedPms(m_context, input);
this.m_preMasterSecret = m_serverCredentials.Decrypt(new TlsCryptoParameters(m_context),
encryptedPreMasterSecret);
}
public override TlsSecret GeneratePreMasterSecret()
{
TlsSecret tmp = this.m_preMasterSecret;
this.m_preMasterSecret = null;
return tmp;
}
}
}
#pragma warning restore
#endif