SSLCertificateSocketFactory

SSLCertificateSocketFactory

public SSLCertificateSocketFactory (int handshakeTimeoutMillis)

This constructor is deprecated.
Use getDefault(int) instead.

createSocket

public Socket createSocket (String host, 
                int port)

Creates a socket and connects it to the specified remote host at the specified remote port. This socket is configured using the socket options established for this factory.

If there is a security manager, its checkConnect method is called with the host address and port as its arguments. This could result in a SecurityException.

By default, this method returns a connected socket and verifies the peer's certificate hostname after connecting using the HostnameVerifier obtained from HttpsURLConnection.getDefaultHostnameVerifier(); if this instance was created with getInsecure(int, android.net.SSLSessionCache), it returns a socket that is not connected instead.

createSocket

public Socket createSocket (Socket k, 
                String host, 
                int port, 
                boolean close)

Returns a socket layered over an existing socket connected to the named host, at the given port. This constructor can be used when tunneling SSL through a proxy or when negotiating the use of SSL over an existing socket. The host and port refer to the logical peer destination. This socket is configured using the socket options established for this factory.

By default, this method returns a connected socket and verifies the peer's certificate hostname after connecting using the HostnameVerifier obtained from HttpsURLConnection.getDefaultHostnameVerifier(); if this instance was created with getInsecure(int, android.net.SSLSessionCache), it returns a socket that is not connected instead.

createSocket

public Socket createSocket ()

Creates a new socket which is not connected to any remote host. You must use Socket#connect to connect the socket.

Warning: Hostname verification is not performed with this method. You MUST verify the server's identity after connecting the socket to avoid person-in-the-middle attacks.

createSocket

public Socket createSocket (InetAddress addr, 
                int port, 
                InetAddress localAddr, 
                int localPort)

Creates a socket and connect it to the specified remote address on the specified remote port. The socket will also be bound to the local address and port suplied. The socket is configured using the socket options established for this factory.

If there is a security manager, its checkConnect method is called with the host address and port as its arguments. This could result in a SecurityException.

This method returns a socket that is not connected.

Warning: Hostname verification is not performed with this method. You MUST verify the server's identity after connecting the socket to avoid person-in-the-middle attacks.

createSocket

public Socket createSocket (InetAddress addr, 
                int port)

Creates a socket and connects it to the specified port number at the specified address. This socket is configured using the socket options established for this factory.

If there is a security manager, its checkConnect method is called with the host address and port as its arguments. This could result in a SecurityException.

This method returns a socket that is not connected.

Warning: Hostname verification is not performed with this method. You MUST verify the server's identity after connecting the socket to avoid person-in-the-middle attacks.

createSocket

public Socket createSocket (String host, 
                int port, 
                InetAddress localAddr, 
                int localPort)

Creates a socket and connects it to the specified remote host on the specified remote port. The socket will also be bound to the local address and port supplied. This socket is configured using the socket options established for this factory.

If there is a security manager, its checkConnect method is called with the host address and port as its arguments. This could result in a SecurityException.

By default, this method returns a connected socket and verifies the peer's certificate hostname after connecting using the HostnameVerifier obtained from HttpsURLConnection.getDefaultHostnameVerifier(); if this instance was created with getInsecure(int, android.net.SSLSessionCache), it returns a socket that is not connected instead.

getDefault

public static SocketFactory getDefault (int handshakeTimeoutMillis)

Returns a new socket factory instance with an optional handshake timeout.

getDefault

public static SSLSocketFactory getDefault (int handshakeTimeoutMillis, 
                SSLSessionCache cache)

Returns a new socket factory instance with an optional handshake timeout and SSL session cache.

getDefaultCipherSuites

public String[] getDefaultCipherSuites ()

Returns the list of cipher suites which are enabled by default. Unless a different list is enabled, handshaking on an SSL connection will use one of these cipher suites. The minimum quality of service for these defaults requires confidentiality protection and server authentication (that is, no anonymous cipher suites).

getInsecure

public static SSLSocketFactory getInsecure (int handshakeTimeoutMillis, 
                SSLSessionCache cache)

Returns a new instance of a socket factory with all SSL security checks disabled, using an optional handshake timeout and SSL session cache.

Warning: Sockets created using this factory are vulnerable to person-in-the-middle attacks!

getNpnSelectedProtocol

public byte[] getNpnSelectedProtocol (Socket socket)

Returns the Next Protocol Negotiation (NPN) protocol selected by client and server, or null if no protocol was negotiated.

getSupportedCipherSuites

public String[] getSupportedCipherSuites ()

Returns the names of the cipher suites which could be enabled for use on an SSL connection. Normally, only a subset of these will actually be enabled by default, since this list may include cipher suites which do not meet quality of service requirements for those defaults. Such cipher suites are useful in specialized applications.

Applications should not blindly enable all supported cipher suites. The supported cipher suites can include signaling cipher suite values that can cause connection problems if enabled inappropriately.

The proper way to use this method is to either check if a specific cipher suite is supported via Arrays.asList(getSupportedCipherSuites()).contains(...) or to filter a desired list of cipher suites to only the supported ones via desiredSuiteSet.retainAll(Arrays.asList(getSupportedCipherSuites())).

setHostname

public void setHostname (Socket socket, 
                String hostName)

Turns on Server Name Indication (SNI) on a given socket.

setKeyManagers

public void setKeyManagers (KeyManager[] keyManagers)

Sets the KeyManagers to be used for connections made by this factory.

setNpnProtocols

public void setNpnProtocols (byte[][] npnProtocols)

Sets the Next Protocol Negotiation (NPN) protocols that this peer is interested in.

For servers this is the sequence of protocols to advertise as supported, in order of preference. This list is sent unencrypted to all clients that support NPN.

For clients this is a list of supported protocols to match against the server's list. If there is no protocol supported by both client and server then the first protocol in the client's list will be selected. The order of the client's protocols is otherwise insignificant.

setTrustManagers

public void setTrustManagers (TrustManager[] trustManager)

Sets the TrustManagers to be used for connections made by this factory.

setUseSessionTickets

public void setUseSessionTickets (Socket socket, 
                boolean useSessionTickets)

Enables session ticket support on the given socket.