com.dropbox.client2

Class SecureSSLSocketFactory

java.lang.Object

org.apache.http.conn.ssl.SSLSocketFactory

com.dropbox.client2.SecureSSLSocketFactory

All Implemented Interfaces:

org.apache.http.conn.scheme.LayeredSocketFactory, org.apache.http.conn.scheme.SocketFactory

public class SecureSSLSocketFactory
extends org.apache.http.conn.ssl.SSLSocketFactory

Includes the following security features: - Pinned trusted root certificates - Strict hostname verification - Require TLS v1.0 and above (TLS v1.2 if supported) - Fixed priority of TLS ciphersuites Currently, client-side SSL connection caching doesn't seem to be compatible with being able to set custom SSL ciphersuites. Therefore, disabling SSL connection caching.

Field Summary

Fields inherited from class org.apache.http.conn.ssl.SSLSocketFactory

ALLOW_ALL_HOSTNAME_VERIFIER, BROWSER_COMPATIBLE_HOSTNAME_VERIFIER, SSL, SSLV2, STRICT_HOSTNAME_VERIFIER, TLS

Constructor Summary

Constructors

Constructor and Description
SecureSSLSocketFactory()

Method Summary

Methods

Modifier and Type	Method and Description
java.net.Socket	connectSocket(java.net.Socket socket, java.lang.String host, int port, java.net.InetAddress localAddress, int localPort, org.apache.http.params.HttpParams params)
java.net.Socket	createSocket()
java.net.Socket	createSocket(java.net.Socket socket, java.lang.String host, int port, boolean autoClose)
org.apache.http.conn.ssl.X509HostnameVerifier	getHostnameVerifier()
void	setHostnameVerifier(org.apache.http.conn.ssl.X509HostnameVerifier hostnameVerifier)

Methods inherited from class org.apache.http.conn.ssl.SSLSocketFactory

getSocketFactory, isSecure

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureSSLSocketFactory

public SecureSSLSocketFactory()
                       throws java.security.KeyManagementException,
                              java.security.UnrecoverableKeyException,
                              java.security.NoSuchAlgorithmException,
                              java.security.KeyStoreException,
                              java.security.cert.CertificateException,
                              java.io.IOException

Throws:

java.security.KeyManagementException

java.security.UnrecoverableKeyException

java.security.NoSuchAlgorithmException

java.security.KeyStoreException

java.security.cert.CertificateException

java.io.IOException

Method Detail

createSocket

public java.net.Socket createSocket()
                             throws java.io.IOException

Specified by:

createSocket in interface org.apache.http.conn.scheme.SocketFactory

Overrides:

createSocket in class org.apache.http.conn.ssl.SSLSocketFactory

Throws:

java.io.IOException

connectSocket

public java.net.Socket connectSocket(java.net.Socket socket,
                            java.lang.String host,
                            int port,
                            java.net.InetAddress localAddress,
                            int localPort,
                            org.apache.http.params.HttpParams params)
                              throws java.io.IOException

Specified by:

connectSocket in interface org.apache.http.conn.scheme.SocketFactory

Overrides:

connectSocket in class org.apache.http.conn.ssl.SSLSocketFactory

Throws:

java.io.IOException

createSocket

public java.net.Socket createSocket(java.net.Socket socket,
                           java.lang.String host,
                           int port,
                           boolean autoClose)
                             throws java.io.IOException

Specified by:

createSocket in interface org.apache.http.conn.scheme.LayeredSocketFactory

Overrides:

createSocket in class org.apache.http.conn.ssl.SSLSocketFactory

Throws:

java.io.IOException

setHostnameVerifier

public void setHostnameVerifier(org.apache.http.conn.ssl.X509HostnameVerifier hostnameVerifier)

Overrides:

setHostnameVerifier in class org.apache.http.conn.ssl.SSLSocketFactory

getHostnameVerifier

public org.apache.http.conn.ssl.X509HostnameVerifier getHostnameVerifier()

Overrides:

getHostnameVerifier in class org.apache.http.conn.ssl.SSLSocketFactory