libcore/x-net/src/main/java/javax/net/ssl/DefaultSSLContext.java

/*
 *  Licensed to the Apache Software Foundation (ASF) under one or more
 *  contributor license agreements.  See the NOTICE file distributed with
 *  this work for additional information regarding copyright ownership.
 *  The ASF licenses this file to You under the Apache License, Version 2.0
 *  (the "License"); you may not use this file except in compliance with
 *  the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 */

package javax.net.ssl;

import java.io.FileInputStream;
import java.security.AccessController;
import java.security.KeyStore;
import java.security.PrivilegedAction;
import java.security.Provider;
import java.security.Security;

import org.apache.harmony.security.fortress.Engine;
import org.apache.harmony.security.fortress.Services;

/**
 * Support class for this package.
 */
final class DefaultSSLContext {
    private static SSLContext defaultSSLContext;

     static synchronized SSLContext getContext() {
        if (defaultSSLContext == null) {
            defaultSSLContext = AccessController
                    .doPrivileged(new PrivilegedAction<SSLContext>() {
                        public SSLContext run() {
                            return findDefault();
                        }
                    });
        }
        return defaultSSLContext;
    }

    private static SSLContext findDefault() {
        // FIXME EXPORT CONTROL
        for (Provider provider : Services.getProvidersList()) {
            final Provider.Service service = Engine.door.getService(provider, "SSLContext");
            if (service != null) {
                try {
                    SSLContext con = new SSLContext((SSLContextSpi) service.newInstance(null),
                            service.getProvider(), service.getAlgorithm());

                    /* 
                     * TODO 
                     * javax.net.ssl.keyStoreProvider, 
                     * javax.net.ssl.trustStoreProvider system property
                     */
                    
                    // find KeyStore, KeyManagers
                    KeyManager[] keyManagers = null;
                    KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
                    String keystore = System.getProperty("javax.net.ssl.keyStore");
                    String keystorepwd = System.getProperty("javax.net.ssl.keyStorePassword");
                    char[] pwd = null;
                    if (keystorepwd != null) {
                        pwd = keystorepwd.toCharArray();
                    }
                    if (keystore != null) {
                        FileInputStream fis = new FileInputStream(keystore);
                        try {
                            ks.load(fis, pwd);
                        } finally {
                            fis.close();
                        }
                        KeyManagerFactory kmf;
                        String kmfAlg = Security.getProperty("ssl.KeyManagerFactory.algorithm");
                        if (kmfAlg == null) {
                            kmfAlg = "SunX509";
                        }
                        kmf = KeyManagerFactory.getInstance(kmfAlg);
                        kmf.init(ks, pwd);
                        keyManagers = kmf.getKeyManagers();
                    }

                    // find TrustStore, TrustManagers
                    TrustManager[] trustManagers = null;
                    keystore = System.getProperty("javax.net.ssl.trustStore");
                    keystorepwd = System.getProperty("javax.net.ssl.trustStorePassword");
                    pwd = null;
                    if (keystorepwd != null) {
                        pwd = keystorepwd.toCharArray();
                    }
                    // TODO Defaults: jssecacerts; cacerts
                    if (keystore != null) {
                        FileInputStream fis = new FileInputStream(keystore);
                        try {
                            ks.load(fis, pwd);
                        } finally {
                            fis.close();
                        }
                        TrustManagerFactory tmf;
                        String tmfAlg = Security.getProperty("ssl.TrustManagerFactory.algorithm");
                        if (tmfAlg == null) {
                            tmfAlg = "PKIX";
                        }
                        tmf = TrustManagerFactory.getInstance(tmfAlg);
                        tmf.init(ks);
                        trustManagers = tmf.getTrustManagers();
                    }

                    con.init(keyManagers, trustManagers, null);
                    return con;
                } catch (Exception e) {
                    // ignore and try another
                }
            }
        }
        return null;
    }
}