TlsRsaKeyExchange.cs 2.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384
  1. #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
  2. #pragma warning disable
  3. using System;
  4. using System.IO;
  5. using BestHTTP.SecureProtocol.Org.BouncyCastle.Tls.Crypto;
  6. namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
  7. {
  8. /// <summary>(D)TLS RSA key exchange.</summary>
  9. public class TlsRsaKeyExchange
  10. : AbstractTlsKeyExchange
  11. {
  12. private static int CheckKeyExchange(int keyExchange)
  13. {
  14. switch (keyExchange)
  15. {
  16. case KeyExchangeAlgorithm.RSA:
  17. return keyExchange;
  18. default:
  19. throw new ArgumentException("unsupported key exchange algorithm", "keyExchange");
  20. }
  21. }
  22. protected TlsCredentialedDecryptor m_serverCredentials = null;
  23. protected TlsEncryptor m_serverEncryptor;
  24. protected TlsSecret m_preMasterSecret;
  25. public TlsRsaKeyExchange(int keyExchange)
  26. : base(CheckKeyExchange(keyExchange))
  27. {
  28. }
  29. public override void SkipServerCredentials()
  30. {
  31. throw new TlsFatalAlert(AlertDescription.internal_error);
  32. }
  33. public override void ProcessServerCredentials(TlsCredentials serverCredentials)
  34. {
  35. this.m_serverCredentials = TlsUtilities.RequireDecryptorCredentials(serverCredentials);
  36. }
  37. public override void ProcessServerCertificate(Certificate serverCertificate)
  38. {
  39. this.m_serverEncryptor = serverCertificate.GetCertificateAt(0).CreateEncryptor(
  40. TlsCertificateRole.RsaEncryption);
  41. }
  42. public override short[] GetClientCertificateTypes()
  43. {
  44. return new short[]{ ClientCertificateType.rsa_sign, ClientCertificateType.dss_sign,
  45. ClientCertificateType.ecdsa_sign };
  46. }
  47. public override void ProcessClientCredentials(TlsCredentials clientCredentials)
  48. {
  49. TlsUtilities.RequireSignerCredentials(clientCredentials);
  50. }
  51. public override void GenerateClientKeyExchange(Stream output)
  52. {
  53. this.m_preMasterSecret = TlsUtilities.GenerateEncryptedPreMasterSecret(m_context, m_serverEncryptor,
  54. output);
  55. }
  56. public override void ProcessClientKeyExchange(Stream input)
  57. {
  58. byte[] encryptedPreMasterSecret = TlsUtilities.ReadEncryptedPms(m_context, input);
  59. this.m_preMasterSecret = m_serverCredentials.Decrypt(new TlsCryptoParameters(m_context),
  60. encryptedPreMasterSecret);
  61. }
  62. public override TlsSecret GeneratePreMasterSecret()
  63. {
  64. TlsSecret tmp = this.m_preMasterSecret;
  65. this.m_preMasterSecret = null;
  66. return tmp;
  67. }
  68. }
  69. }
  70. #pragma warning restore
  71. #endif