Created
August 8, 2016 02:55
-
-
Save pollux-/fbcc74984e110bb49497faa2d0ed5ee1 to your computer and use it in GitHub Desktop.
Force enable TLS v.1.2
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| public class TLSSocketFactory extends SSLSocketFactory { | |
| private SSLSocketFactory internalSSLSocketFactory; | |
| public TLSSocketFactory() throws KeyManagementException, NoSuchAlgorithmException { | |
| SSLContext sslContext = SSLContext.getInstance("TLS"); | |
| sslContext.init(null, new TrustManager[] { systemDefaultTrustManager() }, null); | |
| internalSSLSocketFactory = sslContext.getSocketFactory(); | |
| } | |
| @Override | |
| public String[] getDefaultCipherSuites() { | |
| return internalSSLSocketFactory.getDefaultCipherSuites(); | |
| } | |
| @Override | |
| public String[] getSupportedCipherSuites() { | |
| return internalSSLSocketFactory.getSupportedCipherSuites(); | |
| } | |
| @Override | |
| public Socket createSocket(Socket s, String host, int port, boolean autoClose) throws IOException { | |
| return enableTLSOnSocket(internalSSLSocketFactory.createSocket(s, host, port, autoClose)); | |
| } | |
| @Override | |
| public Socket createSocket(String host, int port) throws IOException, UnknownHostException { | |
| return enableTLSOnSocket(internalSSLSocketFactory.createSocket(host, port)); | |
| } | |
| @Override | |
| public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException { | |
| return enableTLSOnSocket(internalSSLSocketFactory.createSocket(host, port, localHost, localPort)); | |
| } | |
| @Override | |
| public Socket createSocket(InetAddress host, int port) throws IOException { | |
| return enableTLSOnSocket(internalSSLSocketFactory.createSocket(host, port)); | |
| } | |
| @Override | |
| public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { | |
| return enableTLSOnSocket(internalSSLSocketFactory.createSocket(address, port, localAddress, localPort)); | |
| } | |
| private Socket enableTLSOnSocket(Socket socket) { | |
| if(socket != null && (socket instanceof SSLSocket)) { | |
| ((SSLSocket)socket).setEnabledProtocols(new String[] {"TLSv1.1", "TLSv1.2"}); | |
| } | |
| return socket; | |
| } | |
| public X509TrustManager systemDefaultTrustManager() { | |
| try { | |
| TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance( | |
| TrustManagerFactory.getDefaultAlgorithm()); | |
| trustManagerFactory.init((KeyStore) null); | |
| TrustManager[] trustManagers = trustManagerFactory.getTrustManagers(); | |
| if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) { | |
| throw new IllegalStateException("Unexpected default trust managers:" | |
| + Arrays.toString(trustManagers)); | |
| } | |
| return (X509TrustManager) trustManagers[0]; | |
| } catch (GeneralSecurityException e) { | |
| throw new AssertionError(); // The system has no TLS. Just give up. | |
| } | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment