123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120 |
- #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
- #pragma warning disable
- using System;
- using System.Collections;
- using System.IO;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.IO;
- namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
- {
- /// <summary>RFC 3546 3.3</summary>
- public sealed class CertificateUrl
- {
- private readonly short m_type;
- private readonly IList m_urlAndHashList;
- /// <param name="type">see <see cref="CertChainType"/> for valid constants.</param>
- /// <param name="urlAndHashList">an <see cref="IList"/> of <see cref="UrlAndHash"/>.</param>
- public CertificateUrl(short type, IList urlAndHashList)
- {
- if (!CertChainType.IsValid(type))
- throw new ArgumentException("not a valid CertChainType value", "type");
- if (urlAndHashList == null || urlAndHashList.Count < 1)
- throw new ArgumentException("must have length > 0", "urlAndHashList");
- if (type == CertChainType.pkipath && urlAndHashList.Count != 1)
- throw new ArgumentException("must contain exactly one entry when type is "
- + CertChainType.GetText(type), "urlAndHashList");
- this.m_type = type;
- this.m_urlAndHashList = urlAndHashList;
- }
- /// <returns><see cref="CertChainType"/></returns>
- public short Type
- {
- get { return m_type; }
- }
- /// <returns>an <see cref="IList"/> of <see cref="UrlAndHash"/>.</returns>
- public IList UrlAndHashList
- {
- get { return m_urlAndHashList; }
- }
- /// <summary>Encode this <see cref="CertificateUrl"/> to a <see cref="Stream"/>.</summary>
- /// <param name="output">the <see cref="Stream"/> to encode to.</param>
- /// <exception cref="IOException"/>
- public void Encode(Stream output)
- {
- TlsUtilities.WriteUint8(m_type, output);
- ListBuffer16 buf = new ListBuffer16();
- foreach (UrlAndHash urlAndHash in m_urlAndHashList)
- {
- urlAndHash.Encode(buf);
- }
- buf.EncodeTo(output);
- }
- /// <summary>Parse a <see cref="CertificateUrl"/> from a <see cref="Stream"/>.</summary>
- /// <param name="context">the <see cref="TlsContext"/> of the current connection.</param>
- /// <param name="input">the <see cref="Stream"/> to parse from.</param>
- /// <returns>a <see cref="CertificateUrl"/> object.</returns>
- /// <exception cref="IOException"/>
- public static CertificateUrl Parse(TlsContext context, Stream input)
- {
- short type = TlsUtilities.ReadUint8(input);
- if (!CertChainType.IsValid(type))
- throw new TlsFatalAlert(AlertDescription.decode_error);
- int totalLength = TlsUtilities.ReadUint16(input);
- if (totalLength < 1)
- throw new TlsFatalAlert(AlertDescription.decode_error);
- byte[] urlAndHashListData = TlsUtilities.ReadFully(totalLength, input);
- MemoryStream buf = new MemoryStream(urlAndHashListData, false);
- IList url_and_hash_list = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateArrayList();
- while (buf.Position < buf.Length)
- {
- UrlAndHash url_and_hash = UrlAndHash.Parse(context, buf);
- url_and_hash_list.Add(url_and_hash);
- }
- if (type == CertChainType.pkipath && url_and_hash_list.Count != 1)
- throw new TlsFatalAlert(AlertDescription.decode_error);
- return new CertificateUrl(type, url_and_hash_list);
- }
- // TODO Could be more generally useful
- internal class ListBuffer16
- : MemoryStream
- {
- internal ListBuffer16()
- {
- // Reserve space for length
- TlsUtilities.WriteUint16(0, this);
- }
- internal void EncodeTo(Stream output)
- {
- // Patch actual length back in
- int length = (int)Length - 2;
- TlsUtilities.CheckUint16(length);
- Seek(0L, SeekOrigin.Begin);
- TlsUtilities.WriteUint16(length, this);
- Streams.WriteBufTo(this, output);
- BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.Dispose(this);
- }
- }
- }
- }
- #pragma warning restore
- #endif
|