SSLClientListenerRunner

java.lang.Object

net.i2p.router.client.ClientListenerRunner

net.i2p.router.client.SSLClientListenerRunner

All Implemented Interfaces:: Runnable

class SSLClientListenerRunnerextends ClientListenerRunner

SSL version of ClientListenerRunner.

Field Summary
Fields
Modifier and Type
Field
Description
private SSLServerSocketFactory
_factory
Factory for the encrypted listener's sockets.
private static final String
ASCII_KEYFILE
File the certificate is written out as text.
private static final String
KEY_ALIAS
Alias of the key in the keystore.
private static final String
PROP_KEY_PASSWORD
Property holding the key's password.
private static final String
PROP_KEYSTORE_PASSWORD
Property holding the keystore's password.
Fields inherited from class ClientListenerRunner
_bindAllInterfaces, _context, _listening, _log, _manager, _port, _running, _socket, BIND_ALL_INTERFACES, CONNECT_TIMEOUT
Modifier and Type
Field
Description
protected final boolean
_bindAllInterfaces
Whether to bind on all interfaces.
protected final RouterContext
_context
Router context.
protected boolean
_listening
Whether the socket is currently listening.
protected final Log
_log
Logger for this class.
protected final ClientManager
_manager
Client manager.
protected final int
_port
Port to listen on.
protected boolean
_running
Whether the runner is running.
protected ServerSocket
_socket
Server socket for accepting connections.
static final String
BIND_ALL_INTERFACES
Property to control binding to all interfaces.
protected static final int
CONNECT_TIMEOUT
Give the i2cp client 5 seconds to show that they're really i2cp clients.
Constructor Summary
Constructors
Constructor
Description
SSLClientListenerRunner(RouterContext context, ClientManager manager, int port)
Creates an SSL listener on the given port, opening the client manager.
Method Summary
Private Methods
Modifier and Type
Method
Description
private boolean
createKeyStore(File ks)
Call out to keytool to create a new keystore with a keypair in it.
private void
exportCert(File ks)
Pull the cert back OUT of the keystore and save it as ascii so the clients can get to it.
protected ServerSocket
getServerSocket()
A SSLServerSocket from the configured socket factory.
private boolean
initializeFactory(File ks)
The SSLContext and socket factory set up from the given keystore.
protected void
runServer()
Create (if necessary) and load the key store, then run.
protected boolean
validate(Socket socket)
Overridden because SSL handshake may need more time, and available() in super doesn't work.
private boolean
verifyKeyStore(File ks)
Verify the keystore exists and is usable, creating it if necessary.
Methods inherited from class ClientListenerRunner
isListening, run, runConnection, stopListening
Modifier and Type
Method
Description
boolean
isListening()
Check if the listener is currently running and listening.
void
run()

protected void
runConnection(Socket socket)
Handle the connection by passing it off to a ClientConnectionRunner.
void
stopListening()
Stop listening for connections.
Methods inherited from class Object
clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details
- _factory
  private SSLServerSocketFactory _factory
  Factory for the encrypted listener's sockets.
- PROP_KEYSTORE_PASSWORD
  private static final String PROP_KEYSTORE_PASSWORD
  Property holding the keystore's password.
  See Also:
  Constant Field Values
- PROP_KEY_PASSWORD
  private static final String PROP_KEY_PASSWORD
  Property holding the key's password.
  See Also:
  Constant Field Values
- KEY_ALIAS
  private static final String KEY_ALIAS
  Alias of the key in the keystore.
  See Also:
  Constant Field Values
- ASCII_KEYFILE
  private static final String ASCII_KEYFILE
  File the certificate is written out as text.
  See Also:
  Constant Field Values
Constructor Details
- SSLClientListenerRunner
  public SSLClientListenerRunner(RouterContext context, ClientManager manager, int port)
  Creates an SSL listener on the given port, opening the client manager.
  Parameters:
  context - the router context
  manager - the client manager to attach to the listener
  port - the SSL port to listen on
Method Details
- verifyKeyStore
  private boolean verifyKeyStore(File ks)
  Verify the keystore exists and is usable, creating it if necessary.
  Parameters:
  ks - the keystore file to verify
  Returns:
  success if it exists and we have a password, or it was created successfully.
- createKeyStore
  private boolean createKeyStore(File ks)
  Call out to keytool to create a new keystore with a keypair in it. Trying to do this programatically is a nightmare, requiring either BouncyCastle libs or using proprietary Sun libs, and it's a huge mess. If successful, stores the keystore password and key password in router.config.
  Parameters:
  ks - the keystore file to create
  Returns:
  true if the keystore was created and its passwords saved
- exportCert
  private void exportCert(File ks)
  Pull the cert back OUT of the keystore and save it as ascii so the clients can get to it.
  Parameters:
  ks - the keystore to export the certificate from
- initializeFactory
  private boolean initializeFactory(File ks)
  The SSLContext and socket factory set up from the given keystore.
  Parameters:
  ks - the keystore to read the key material from
  Returns:
  true if the factory was built and stored, false if the keystore could not be read
- getServerSocket
  protected ServerSocket getServerSocket() throws IOException
  A SSLServerSocket from the configured socket factory.
  Overrides:
  getServerSocket in class ClientListenerRunner
  Returns:
  the server socket
  Throws:
  IOException - if the socket cannot be created
- runServer
  protected void runServer()
  Create (if necessary) and load the key store, then run.
  Overrides:
  runServer in class ClientListenerRunner
- validate
  protected boolean validate(Socket socket)
  Overridden because SSL handshake may need more time, and available() in super doesn't work. The handshake doesn't start until a read().
  Overrides:
  validate in class ClientListenerRunner
  Parameters:
  socket - the accepted connection to probe for the I2CP protocol byte
  Returns:
  true if the first byte is the I2CP protocol byte

Field Summary

Fields inherited from class ClientListenerRunner

Constructor Summary

Method Summary

Methods inherited from class ClientListenerRunner

Methods inherited from class Object

Field Details

_factory

PROP_KEYSTORE_PASSWORD

PROP_KEY_PASSWORD

KEY_ALIAS

ASCII_KEYFILE

Constructor Details

Method Details

verifyKeyStore

createKeyStore

exportCert

initializeFactory

getServerSocket

runServer

validate