Class OpenSSLContext

java/org/apache/tomcat/util/net/openssl/OpenSSLContext.java:66–714

OpenSSL implementation of the SSL context.

 * OpenSSL implementation of the SSL context.
 */
public class OpenSSLContext implements org.apache.tomcat.util.net.SSLContext {

    private static final Log log = LogFactory.getLog(OpenSSLContext.class);
    private static final StringManager sm = StringManager.getManager(OpenSSLContext.class);

    private static final String defaultProtocol = "TLS";

    private static final String BEGIN_KEY = "-----BEGIN PRIVATE KEY-----\n";
    private static final String END_KEY = "\n-----END PRIVATE KEY-----";

    /**
     * X509 certificate factory instance.
     */
    static final CertificateFactory X509_CERT_FACTORY;
    static {
        try {
            X509_CERT_FACTORY = CertificateFactory.getInstance("X.509");
        } catch (CertificateException e) {
            throw new IllegalStateException(sm.getString("openssl.X509FactoryError"), e);
        }
    }

    private static final Cleaner cleaner = Cleaner.create();

    private final SSLHostConfig sslHostConfig;
    private final SSLHostConfigCertificate certificate;
    private final List<String> negotiableProtocols;

    private OpenSSLSessionContext sessionContext;
    private X509TrustManager x509TrustManager;
    private String enabledProtocol;
    private boolean initialized = false;

    private final OpenSSLState state;
    private final Cleanable cleanable;

    /**
     * Constructs an OpenSSLContext for the given certificate and protocols.
     *
     * @param certificate The SSL host config certificate
     * @param negotiableProtocols The list of negotiable protocols
     * @throws SSLException if initialization fails
     */
    public OpenSSLContext(SSLHostConfigCertificate certificate, List<String> negotiableProtocols) throws SSLException {
        this.sslHostConfig = certificate.getSSLHostConfig();
        this.certificate = certificate;
        long aprPool = Pool.create(0);
        long cctx = 0;
        long ctx = 0;
        boolean success = false;
        try {
            // Create OpenSSLConfCmd context if used
            if (sslHostConfig.getOpenSslConf() == null && sslHostConfig.getTrustManagerClassName() == null &&
                    sslHostConfig.getTruststore() == null) {
                /*
                 * If an instance of OpenSSLConf is required, it must be created here so the reference can be placed in
                 * the (immutable) OpenSSLState record.
                 *