123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687 |
- #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
- #pragma warning disable
- using System;
- using System.Collections;
- using System.IO;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Tls.Crypto;
- namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
- {
- public class SrpTlsClient
- : AbstractTlsClient
- {
- private static readonly int[] DefaultCipherSuites = new int[]
- {
- CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
- };
- protected readonly TlsSrpIdentity m_srpIdentity;
- public SrpTlsClient(TlsCrypto crypto, byte[] identity, byte[] password)
- : this(crypto, new BasicTlsSrpIdentity(identity, password))
- {
- }
- public SrpTlsClient(TlsCrypto crypto, TlsSrpIdentity srpIdentity)
- : base(crypto)
- {
- this.m_srpIdentity = srpIdentity;
- }
- protected override int[] GetSupportedCipherSuites()
- {
- return TlsUtilities.GetSupportedCipherSuites(Crypto, DefaultCipherSuites);
- }
- protected override ProtocolVersion[] GetSupportedVersions()
- {
- return ProtocolVersion.TLSv12.DownTo(ProtocolVersion.TLSv10);
- }
- protected virtual bool RequireSrpServerExtension
- {
- // No explicit guidance in RFC 5054; by default an (empty) extension from server is optional
- get { return false; }
- }
- /// <exception cref="IOException"/>
- public override IDictionary GetClientExtensions()
- {
- IDictionary clientExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(
- base.GetClientExtensions());
- TlsSrpUtilities.AddSrpExtension(clientExtensions, m_srpIdentity.GetSrpIdentity());
- return clientExtensions;
- }
- /// <exception cref="IOException"/>
- public override void ProcessServerExtensions(IDictionary serverExtensions)
- {
- if (!TlsUtilities.HasExpectedEmptyExtensionData(serverExtensions, ExtensionType.srp,
- AlertDescription.illegal_parameter))
- {
- if (RequireSrpServerExtension)
- throw new TlsFatalAlert(AlertDescription.illegal_parameter);
- }
- base.ProcessServerExtensions(serverExtensions);
- }
- public override TlsSrpIdentity GetSrpIdentity()
- {
- return m_srpIdentity;
- }
- /// <exception cref="IOException"/>
- public override TlsAuthentication GetAuthentication()
- {
- /*
- * Note: This method is not called unless a server certificate is sent, which may be the
- * case e.g. for SRP_DSS or SRP_RSA key exchange.
- */
- throw new TlsFatalAlert(AlertDescription.internal_error);
- }
- }
- }
- #pragma warning restore
- #endif
|