Class GlobusGSSContextImpl

java.lang.Object

org.globus.gsi.gssapi.GlobusGSSContextImpl

All Implemented Interfaces:

ExtendedGSSContext, GSSContext

public class GlobusGSSContextImpl
extends Object
implements ExtendedGSSContext

Implementation of SSL/GSI mechanism for Java GSS-API. The implementation is based on JSSE (for SSL API) and the BouncyCastle library (for certificate processing API).
The implementation is not designed to be thread-safe.

Field Summary

Fields

Modifier and Type	Field	Description
private static final int	ACCEPT
protected Boolean	acceptNoClientCerts
protected boolean	anonymity
private String[]	bannedCiphers
protected BouncyCastleCertProcessingFactory	certFactory
protected Boolean	checkContextExpiration
private static final int	CLIENT_END_DEL
private static final int	CLIENT_START_DEL
protected boolean	conn
protected boolean	credentialDelegation
protected GlobusGSSCredentialImpl	ctxCred	Credential of this context.
protected ExtendedGSSCredential	delegatedCred	Credential delegated using delegation API
private static final int	DELEGATION_COMPLETE_CRED
private static final int	DELEGATION_SIGN_CERT
private static final int	DELEGATION_START
private static final byte[]	DELEGATION_TOKEN
protected boolean	delegationFinished	Delegation finished indicator
protected int	delegationState	Delegation state
protected GSIConstants.DelegationType	delegationType
protected ExtendedGSSCredential	delegCred	Credential delegated during context establishment
protected boolean	encryption
protected boolean	established
protected GSSName	expectedTargetName	Expected target name.
protected Date	goodUntil	Context expiration date.
private static final int	GSI_MESSAGE_DIGEST_PADDING
private static final int	GSI_SEQUENCE_SIZE	SSL3_RT_GSSAPI_OPENSSL
static final int	GSI_WRAP	Used to distinguish between a token created by wrap with GSSConstants.GSI_BIG QoP and a regular token created by wrap.
protected Integer	gssMode
private static final int	HANDSHAKE
private static I18n	i18n
private static final int	INITIATE
protected KeyPair	keyPair	Used during delegation
private KeyPairCache	keyPairCache	KeyPair generation with cache of keypairs if configured
private static org.apache.commons.logging.Log	logger
private static final String[]	NO_ENCRYPTION
private ByteBuffer	outByteBuff
protected Boolean	peerLimited	Limited peer credentials
protected Map	proxyPolicyHandlers
protected Boolean	rejectLimitedProxy
protected Boolean	requireAuthzWithDelegation
protected Boolean	requireClientAuth
protected int	role	Context role
private byte[]	savedInBytes
private static final int	SERVER_END_DEL
private static final int	SERVER_START_DEL
protected GSSName	sourceName	The name of the context initiator
protected SSLConfigurator	sslConfigurator
protected SSLContext	sslContext
protected SSLEngine	sslEngine
protected int	state	Handshake state
protected GSSName	targetName	The name of the context acceptor
protected TrustedCertificates	tc
private static final int	UNDEFINED

Fields inherited from interface GSSContext

DEFAULT_LIFETIME, INDEFINITE_LIFETIME

Constructor Summary

Constructors

Constructor	Description
GlobusGSSContextImpl(GSSName target, GlobusGSSCredentialImpl cred)

Method Summary

Modifier and Type	Method	Description
byte[]	acceptDelegation(int lifetime, byte[] buf, int off, int len)	Accept a delegated credential.
byte[]	acceptSecContext(byte[] inBuff, int off, int len)	This function drives the accepting side of the context establishment process.
void	acceptSecContext(InputStream in, OutputStream out)	It works just like acceptSecContext method.
private X509Certificate	bcConvert(X509Certificate cert)
protected void	checkContext()
void	dispose()
byte[]	export()	Currently not implemented.
protected byte[]	generateCertRequest(X509Certificate cert)
boolean	getAnonymityState()
boolean	getConfState()
boolean	getCredDelegState()
GSSCredential	getDelegatedCredential()	Returns the delegated credential that was delegated using the initDelegation and acceptDelegation functions.
GSSCredential	getDelegCred()
boolean	getIntegState()
int	getLifetime()
Oid	getMech()
byte[]	getMIC(byte[] inBuf, int off, int len, MessageProp prop)	Returns a cryptographic MIC (message integrity check) of a specified message.
void	getMIC(InputStream inStream, OutputStream outStream, MessageProp msgProp)	Currently not implemented.
boolean	getMutualAuthState()
Object	getOption(Oid option)	Gets a context option.
boolean	getReplayDetState()
boolean	getSequenceDetState()
GSSName	getSrcName()
GSSName	getTargName()
int	getWrapSizeLimit(int qop, boolean confReq, int maxTokenSize)	Currently not implemented.
private void	handshakeFinished()
private void	init(int how)
byte[]	initDelegation(GSSCredential credential, Oid mechanism, int lifetime, byte[] buf, int off, int len)	Initiate the delegation of a credential.
byte[]	initSecContext(byte[] inBuff, int off, int len)	This function drives the initiating side of the context establishment process.
int	initSecContext(InputStream in, OutputStream out)	It works just like initSecContext method.
Object	inquireByOid(Oid oid)	Retrieves arbitrary data about this context.
boolean	isDelegationFinished()	Used during delegation to determine the state of the delegation.
boolean	isEstablished()
boolean	isInitiator()
boolean	isProtReady()
boolean	isTransferable()	Currently not implemented.
void	requestAnonymity(boolean state)
void	requestConf(boolean state)
void	requestCredDeleg(boolean state)
void	requestInteg(boolean state)
void	requestLifetime(int lifetime)
void	requestMutualAuth(boolean state)
void	requestReplayDet(boolean state)
void	requestSequenceDet(boolean state)
private void	runDelegatedTasks(SSLEngine engine)
protected void	setAcceptNoClientCerts(Object value)
void	setBannedCiphers(String[] ciphers)	Specifies a list of ciphers that will not be used.
void	setChannelBinding(ChannelBinding cb)	Currently not implemented.
protected void	setCheckContextExpired(Object value)
private void	setCredential()
protected void	setDelegationType(Object value)
private void	setDone()
private void	setGoodUntil(Date date)
protected void	setGssMode(Object value)
void	setOption(Oid option, Object value)	Sets a context option.
protected void	setProxyPolicyHandlers(Object value)
protected void	setRejectLimitedProxy(Object value)
protected void	setRequireAuthzWithDelegation(Object value)
protected void	setRequireClientAuth(Object value)
protected void	setTrustedCertificates(Object value)
private ByteBuffer	sslDataUnwrap(ByteBuffer inBBuff, ByteBuffer outBBuff)
private ByteBuffer	sslDataWrap(ByteBuffer inBBuff, ByteBuffer outBBuff)
private ByteBuffer	sslProcessHandshake(ByteBuffer inBBuff, ByteBuffer outBBuff)
private byte[]	unwrap(byte[] inBuf, int off, int len)
byte[]	unwrap(byte[] inBuf, int off, int len, MessageProp prop)	Unwraps a token generated by wrap method on the other side of the context.
void	unwrap(InputStream inStream, OutputStream outStream, MessageProp msgProp)	Currently not implemented.
protected void	verifyDelegatedCert(X509Certificate certificate)
void	verifyMIC(byte[] inTok, int tokOff, int tokLen, byte[] inMsg, int msgOff, int msgLen, MessageProp prop)	Verifies a cryptographic MIC (message integrity check) of a specified message.
void	verifyMIC(InputStream tokStream, InputStream msgStream, MessageProp msgProp)	Currently not implemented.
private byte[]	wrap(byte[] inBuf, int off, int len)
byte[]	wrap(byte[] inBuf, int off, int len, MessageProp prop)	Wraps a message for integrity and protection.
void	wrap(InputStream inStream, OutputStream outStream, MessageProp msgProp)	Currently not implemented.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

private static org.apache.commons.logging.Log logger

i18n

private static I18n i18n

keyPairCache

private KeyPairCache keyPairCache

KeyPair generation with cache of keypairs if configured

GSI_WRAP

public static final int GSI_WRAP

Used to distinguish between a token created by wrap with GSSConstants.GSI_BIG QoP and a regular token created by wrap.

See Also:

• Constant Field Values

GSI_SEQUENCE_SIZE

private static final int GSI_SEQUENCE_SIZE

SSL3_RT_GSSAPI_OPENSSL

See Also:

• Constant Field Values

GSI_MESSAGE_DIGEST_PADDING

private static final int GSI_MESSAGE_DIGEST_PADDING

See Also:

• Constant Field Values

NO_ENCRYPTION

private static final String[] NO_ENCRYPTION

DELEGATION_TOKEN

private static final byte[] DELEGATION_TOKEN

UNDEFINED

private static final int UNDEFINED

See Also:

• Constant Field Values

INITIATE

private static final int INITIATE

See Also:

• Constant Field Values

ACCEPT

private static final int ACCEPT

See Also:

• Constant Field Values

state

protected int state

Handshake state

HANDSHAKE

private static final int HANDSHAKE

See Also:

• Constant Field Values

CLIENT_START_DEL

private static final int CLIENT_START_DEL

See Also:

• Constant Field Values

CLIENT_END_DEL

private static final int CLIENT_END_DEL

See Also:

• Constant Field Values

SERVER_START_DEL

private static final int SERVER_START_DEL

See Also:

• Constant Field Values

SERVER_END_DEL

private static final int SERVER_END_DEL

See Also:

• Constant Field Values

delegationState

protected int delegationState

Delegation state

DELEGATION_START

private static final int DELEGATION_START

See Also:

• Constant Field Values

DELEGATION_SIGN_CERT

private static final int DELEGATION_SIGN_CERT

See Also:

• Constant Field Values

DELEGATION_COMPLETE_CRED

private static final int DELEGATION_COMPLETE_CRED

See Also:

• Constant Field Values

delegatedCred

protected ExtendedGSSCredential delegatedCred

Credential delegated using delegation API

delegationFinished

protected boolean delegationFinished

Delegation finished indicator

credentialDelegation

protected boolean credentialDelegation

anonymity

protected boolean anonymity

encryption

protected boolean encryption

established

protected boolean established

sourceName

protected GSSName sourceName

The name of the context initiator

targetName

protected GSSName targetName

The name of the context acceptor

role

protected int role

Context role

delegCred

protected ExtendedGSSCredential delegCred

Credential delegated during context establishment

delegationType

protected GSIConstants.DelegationType delegationType

gssMode

protected Integer gssMode

checkContextExpiration

protected Boolean checkContextExpiration

rejectLimitedProxy

protected Boolean rejectLimitedProxy

requireClientAuth

protected Boolean requireClientAuth

acceptNoClientCerts

protected Boolean acceptNoClientCerts

requireAuthzWithDelegation

protected Boolean requireAuthzWithDelegation

ctxCred

protected GlobusGSSCredentialImpl ctxCred

Credential of this context. Might be anonymous

expectedTargetName

protected GSSName expectedTargetName

Expected target name. Used for authorization in initiator

goodUntil

protected Date goodUntil

Context expiration date.

sslConfigurator

protected SSLConfigurator sslConfigurator

sslContext

protected SSLContext sslContext

sslEngine

protected SSLEngine sslEngine

conn

protected boolean conn

savedInBytes

private byte[] savedInBytes

outByteBuff

private ByteBuffer outByteBuff

certFactory

protected BouncyCastleCertProcessingFactory certFactory

keyPair

protected KeyPair keyPair

Used during delegation

tc

protected TrustedCertificates tc

proxyPolicyHandlers

protected Map proxyPolicyHandlers

peerLimited

protected Boolean peerLimited

Limited peer credentials

bannedCiphers

private String[] bannedCiphers

Constructor Details

GlobusGSSContextImpl

public GlobusGSSContextImpl(GSSName target,
 GlobusGSSCredentialImpl cred)
                     throws GSSException

Parameters:

target - expected target name. Can be null.

cred - credential. Cannot be null. Might be anonymous.

Throws:

GSSException

Method Details

runDelegatedTasks

private void runDelegatedTasks(SSLEngine engine)
                        throws Exception

Throws:

Exception

bcConvert

private X509Certificate bcConvert(X509Certificate cert)
                           throws GSSException

Throws:

GSSException

acceptSecContext

public byte[] acceptSecContext(byte[] inBuff,
 int off,
 int len)
                        throws GSSException

This function drives the accepting side of the context establishment process. It is expected to be called in tandem with the initSecContext function.
The behavior of context establishment process can be modified by GSSConstants.GSS_MODE and GSSConstants.REJECT_LIMITED_PROXY context options. If the GSSConstants.GSS_MODE option is set to GSIConstants.MODE_SSL the context establishment process will be compatible with regular SSL (no credential delegation support). If the option is set to GSIConstants.MODE_GSI credential delegation during context establishment process will be accepted. If the GSSConstants.REJECT_LIMITED_PROXY option is enabled, a peer presenting limited proxy credential will be automatically rejected and the context establishment process will be aborted.

Specified by:

acceptSecContext in interface GSSContext

Returns:

a byte[] containing the token to be sent to the peer. null indicates that no token is generated (needs more data)

Throws:

GSSException

sslDataWrap

private ByteBuffer sslDataWrap(ByteBuffer inBBuff,
 ByteBuffer outBBuff)
                        throws GSSException

Throws:

GSSException

sslDataUnwrap

private ByteBuffer sslDataUnwrap(ByteBuffer inBBuff,
 ByteBuffer outBBuff)
                          throws GSSException

Throws:

GSSException

sslProcessHandshake

private ByteBuffer sslProcessHandshake(ByteBuffer inBBuff,
 ByteBuffer outBBuff)
                                throws GSSException

Throws:

GSSException

initSecContext

public byte[] initSecContext(byte[] inBuff,
 int off,
 int len)
                      throws GSSException

This function drives the initiating side of the context establishment process. It is expected to be called in tandem with the acceptSecContext function.
The behavior of context establishment process can be modified by GSSConstants.GSS_MODE, GSSConstants.DELEGATION_TYPE, and GSSConstants.REJECT_LIMITED_PROXY context options. If the GSSConstants.GSS_MODE option is set to GSIConstants.MODE_SSL the context establishment process will be compatible with regular SSL (no credential delegation support). If the option is set to GSIConstants.GSS_MODE_GSI credential delegation during context establishment process will performed. The delegation type to be performed can be set using the GSSConstants.DELEGATION_TYPE context option. If the GSSConstants.REJECT_LIMITED_PROXY option is enabled, a peer presenting limited proxy credential will be automatically rejected and the context establishment process will be aborted.

Specified by:

initSecContext in interface GSSContext

Returns:

a byte[] containing the token to be sent to the peer. null indicates that no token is generated (needs more data).

Throws:

GSSException

setDone

private void setDone()

setGoodUntil

private void setGoodUntil(Date date)

init

private void init(int how)
           throws GSSException,
SSLException

Throws:

GSSException

SSLException

handshakeFinished

private void handshakeFinished()
                        throws IOException

Throws:

IOException

setCredential

private void setCredential()
                    throws GSSException

Throws:

GSSException

wrap

public byte[] wrap(byte[] inBuf,
 int off,
 int len,
 MessageProp prop)
            throws GSSException

Wraps a message for integrity and protection. A regular SSL-wrapped token is returned.

Specified by:

wrap in interface GSSContext

Throws:

GSSException

wrap

private byte[] wrap(byte[] inBuf,
 int off,
 int len)
             throws GSSException

Throws:

GSSException

unwrap

public byte[] unwrap(byte[] inBuf,
 int off,
 int len,
 MessageProp prop)
              throws GSSException

Unwraps a token generated by wrap method on the other side of the context.

Specified by:

unwrap in interface GSSContext

Throws:

GSSException

unwrap

private byte[] unwrap(byte[] inBuf,
 int off,
 int len)
               throws GSSException

Throws:

GSSException

dispose

public void dispose()
             throws GSSException

Specified by:

dispose in interface GSSContext

Throws:

GSSException

isEstablished

public boolean isEstablished()

Specified by:

isEstablished in interface GSSContext

requestCredDeleg

public void requestCredDeleg(boolean state)
                      throws GSSException

Specified by:

requestCredDeleg in interface GSSContext

Throws:

GSSException

getCredDelegState

public boolean getCredDelegState()

Specified by:

getCredDelegState in interface GSSContext

isInitiator

public boolean isInitiator()
                    throws GSSException

Specified by:

isInitiator in interface GSSContext

Throws:

GSSException

isProtReady

public boolean isProtReady()

Specified by:

isProtReady in interface GSSContext

requestLifetime

public void requestLifetime(int lifetime)
                     throws GSSException

Specified by:

requestLifetime in interface GSSContext

Throws:

GSSException

getLifetime

public int getLifetime()

Specified by:

getLifetime in interface GSSContext

getMech

public Oid getMech()
            throws GSSException

Specified by:

getMech in interface GSSContext

Throws:

GSSException

getDelegCred

public GSSCredential getDelegCred()
                           throws GSSException

Specified by:

getDelegCred in interface GSSContext

Throws:

GSSException

requestConf

public void requestConf(boolean state)
                 throws GSSException

Specified by:

requestConf in interface GSSContext

Throws:

GSSException

getConfState

public boolean getConfState()

Specified by:

getConfState in interface GSSContext

getMIC

public byte[] getMIC(byte[] inBuf,
 int off,
 int len,
 MessageProp prop)
              throws GSSException

Returns a cryptographic MIC (message integrity check) of a specified message.

Specified by:

getMIC in interface GSSContext

Throws:

GSSException

verifyMIC

public void verifyMIC(byte[] inTok,
 int tokOff,
 int tokLen,
 byte[] inMsg,
 int msgOff,
 int msgLen,
 MessageProp prop)
               throws GSSException

Verifies a cryptographic MIC (message integrity check) of a specified message.

Specified by:

verifyMIC in interface GSSContext

Throws:

GSSException

initSecContext

public int initSecContext(InputStream in,
 OutputStream out)
                   throws GSSException

It works just like initSecContext method. It reads one SSL token from input stream, calls initSecContext method and writes the output token to the output stream (if any) SSL token is not read on the initial call.

Specified by:

initSecContext in interface GSSContext

Throws:

GSSException

acceptSecContext

public void acceptSecContext(InputStream in,
 OutputStream out)
                      throws GSSException

It works just like acceptSecContext method. It reads one SSL token from input stream, calls acceptSecContext method and writes the output token to the output stream (if any)

Specified by:

acceptSecContext in interface GSSContext

Throws:

GSSException

getSrcName

public GSSName getSrcName()
                   throws GSSException

Specified by:

getSrcName in interface GSSContext

Throws:

GSSException

getTargName

public GSSName getTargName()
                    throws GSSException

Specified by:

getTargName in interface GSSContext

Throws:

GSSException

requestInteg

public void requestInteg(boolean state)
                  throws GSSException

Specified by:

requestInteg in interface GSSContext

Throws:

GSSException

getIntegState

public boolean getIntegState()

Specified by:

getIntegState in interface GSSContext

requestSequenceDet

public void requestSequenceDet(boolean state)
                        throws GSSException

Specified by:

requestSequenceDet in interface GSSContext

Throws:

GSSException

getSequenceDetState

public boolean getSequenceDetState()

Specified by:

getSequenceDetState in interface GSSContext

requestReplayDet

public void requestReplayDet(boolean state)
                      throws GSSException

Specified by:

requestReplayDet in interface GSSContext

Throws:

GSSException

getReplayDetState

public boolean getReplayDetState()

Specified by:

getReplayDetState in interface GSSContext

requestAnonymity

public void requestAnonymity(boolean state)
                      throws GSSException

Specified by:

requestAnonymity in interface GSSContext

Throws:

GSSException

getAnonymityState

public boolean getAnonymityState()

Specified by:

getAnonymityState in interface GSSContext

requestMutualAuth

public void requestMutualAuth(boolean state)
                       throws GSSException

Specified by:

requestMutualAuth in interface GSSContext

Throws:

GSSException

getMutualAuthState

public boolean getMutualAuthState()

Specified by:

getMutualAuthState in interface GSSContext

generateCertRequest

protected byte[] generateCertRequest(X509Certificate cert)
                              throws GeneralSecurityException

Throws:

GeneralSecurityException

verifyDelegatedCert

protected void verifyDelegatedCert(X509Certificate certificate)
                            throws GeneralSecurityException

Throws:

GeneralSecurityException

checkContext

protected void checkContext()
                     throws GSSException

Throws:

GSSException

setGssMode

protected void setGssMode(Object value)
                   throws GSSException

Throws:

GSSException

setDelegationType

protected void setDelegationType(Object value)
                          throws GSSException

Throws:

GSSException

setCheckContextExpired

protected void setCheckContextExpired(Object value)
                               throws GSSException

Throws:

GSSException

setRejectLimitedProxy

protected void setRejectLimitedProxy(Object value)
                              throws GSSException

Throws:

GSSException

setRequireClientAuth

protected void setRequireClientAuth(Object value)
                             throws GSSException

Throws:

GSSException

setRequireAuthzWithDelegation

protected void setRequireAuthzWithDelegation(Object value)
                                      throws GSSException

Throws:

GSSException

setAcceptNoClientCerts

protected void setAcceptNoClientCerts(Object value)
                               throws GSSException

Throws:

GSSException

setProxyPolicyHandlers

protected void setProxyPolicyHandlers(Object value)
                               throws GSSException

Throws:

GSSException

setTrustedCertificates

protected void setTrustedCertificates(Object value)
                               throws GSSException

Throws:

GSSException

setOption

public void setOption(Oid option,
 Object value)
               throws GSSException

Description copied from interface: ExtendedGSSContext

Sets a context option. It can be called by context initiator or acceptor but prior to the first call to initSecContext, acceptSecContext, initDelegation or acceptDelegation.

Specified by:

setOption in interface ExtendedGSSContext

Parameters:

option - option type.

value - option value.

Throws:

GSSException - containing the following major error codes: GSSException.FAILURE

getOption

public Object getOption(Oid option)
                 throws GSSException

Description copied from interface: ExtendedGSSContext

Gets a context option. It can be called by context initiator or acceptor.

Specified by:

getOption in interface ExtendedGSSContext

Parameters:

option - option type.

Returns:

value option value. Maybe be null.

Throws:

GSSException - containing the following major error codes: GSSException.FAILURE

initDelegation

public byte[] initDelegation(GSSCredential credential,
 Oid mechanism,
 int lifetime,
 byte[] buf,
 int off,
 int len)
                      throws GSSException

Initiate the delegation of a credential. This function drives the initiating side of the credential delegation process. It is expected to be called in tandem with the acceptDelegation function.
The behavior of this function can be modified by GSSConstants.DELEGATION_TYPE and GSSConstants.GSS_MODE context options. The GSSConstants.DELEGATION_TYPE option controls delegation type to be performed. The GSSConstants.GSS_MODE option if set to GSIConstants.MODE_SSL results in tokens that are not wrapped.

Specified by:

initDelegation in interface ExtendedGSSContext

Parameters:

credential - The credential to be delegated. May be null in which case the credential associated with the security context is used.

mechanism - The desired security mechanism. May be null.

lifetime - The requested period of validity (seconds) of the delegated credential.

Returns:

A token that should be passed to acceptDelegation if isDelegationFinished returns false. May be null.

Throws:

GSSException - containing the following major error codes: GSSException.FAILURE

acceptDelegation

public byte[] acceptDelegation(int lifetime,
 byte[] buf,
 int off,
 int len)
                        throws GSSException

Accept a delegated credential. This function drives the accepting side of the credential delegation process. It is expected to be called in tandem with the initDelegation function.
The behavior of this function can be modified by GSSConstants.GSS_MODE context option. The GSSConstants.GSS_MODE option if set to GSIConstants.MODE_SSL results in tokens that are not wrapped.

Specified by:

acceptDelegation in interface ExtendedGSSContext

Parameters:

lifetime - The requested period of validity (seconds) of the delegated credential.

Returns:

A token that should be passed to initDelegation if isDelegationFinished returns false. May be null.

Throws:

GSSException - containing the following major error codes: GSSException.FAILURE

getDelegatedCredential

public GSSCredential getDelegatedCredential()

Description copied from interface: ExtendedGSSContext

Returns the delegated credential that was delegated using the initDelegation and acceptDelegation functions. This is to be called on the delegation accepting side once once isDelegationFinished returns true.

Specified by:

getDelegatedCredential in interface ExtendedGSSContext

Returns:

The delegated credential. Might be null if credential delegation is not finished.

isDelegationFinished

public boolean isDelegationFinished()

Description copied from interface: ExtendedGSSContext

Used during delegation to determine the state of the delegation.

Specified by:

isDelegationFinished in interface ExtendedGSSContext

Returns:

true if delegation was completed, false otherwise.

inquireByOid

public Object inquireByOid(Oid oid)
                    throws GSSException

Retrieves arbitrary data about this context. Currently supported oid:

• GSSConstants.X509_CERT_CHAIN returns certificate chain of the peer (X509Certificate[]).

Specified by:

inquireByOid in interface ExtendedGSSContext

Parameters:

oid - the oid of the information desired.

Returns:

the information desired. Might be null.

Throws:

GSSException - containing the following major error codes: GSSException.FAILURE

setBannedCiphers

public void setBannedCiphers(String[] ciphers)

Description copied from interface: ExtendedGSSContext

Specifies a list of ciphers that will not be used.

Specified by:

setBannedCiphers in interface ExtendedGSSContext

Parameters:

ciphers - The list of banned ciphers.

getWrapSizeLimit

public int getWrapSizeLimit(int qop,
 boolean confReq,
 int maxTokenSize)
                     throws GSSException

Currently not implemented.

Specified by:

getWrapSizeLimit in interface GSSContext

Throws:

GSSException

wrap

public void wrap(InputStream inStream,
 OutputStream outStream,
 MessageProp msgProp)
          throws GSSException

Currently not implemented.

Specified by:

wrap in interface GSSContext

Throws:

GSSException

unwrap

public void unwrap(InputStream inStream,
 OutputStream outStream,
 MessageProp msgProp)
            throws GSSException

Currently not implemented.

Specified by:

unwrap in interface GSSContext

Throws:

GSSException

getMIC

public void getMIC(InputStream inStream,
 OutputStream outStream,
 MessageProp msgProp)
            throws GSSException

Currently not implemented.

Specified by:

getMIC in interface GSSContext

Throws:

GSSException

verifyMIC

public void verifyMIC(InputStream tokStream,
 InputStream msgStream,
 MessageProp msgProp)
               throws GSSException

Currently not implemented.

Specified by:

verifyMIC in interface GSSContext

Throws:

GSSException

setChannelBinding

public void setChannelBinding(ChannelBinding cb)
                       throws GSSException

Currently not implemented.

Specified by:

setChannelBinding in interface GSSContext

Throws:

GSSException

isTransferable

public boolean isTransferable()
                       throws GSSException

Currently not implemented.

Specified by:

isTransferable in interface GSSContext

Throws:

GSSException

export

public byte[] export()
              throws GSSException

Currently not implemented.

Specified by:

export in interface GSSContext

Throws:

GSSException