You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hc.apache.org by ol...@apache.org on 2014/11/06 15:29:58 UTC
svn commit: r1637120 [34/40] - in /httpcomponents/site: ./
httpcomponents-asyncclient-4.0.x/ httpcomponents-asyncclient-4.1.x/
httpcomponents-client-4.3.x/ httpcomponents-client-4.3.x/fluent-hc/
httpcomponents-client-4.3.x/fluent-hc/apidocs/ httpcompon...
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/SSLConnectionSocketFactory.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/SSLConnectionSocketFactory.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/SSLConnectionSocketFactory.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/SSLConnectionSocketFactory.html Thu Nov 6 14:29:37 2014
@@ -50,259 +50,274 @@
<a class="jxr_linenumber" name="40" href="#40">40</a> <strong class="jxr_keyword">import</strong> java.io.IOException;
<a class="jxr_linenumber" name="41" href="#41">41</a> <strong class="jxr_keyword">import</strong> java.net.InetSocketAddress;
<a class="jxr_linenumber" name="42" href="#42">42</a> <strong class="jxr_keyword">import</strong> java.net.Socket;
-<a class="jxr_linenumber" name="43" href="#43">43</a>
-<a class="jxr_linenumber" name="44" href="#44">44</a> <em class="jxr_javadoccomment">/**</em>
-<a class="jxr_linenumber" name="45" href="#45">45</a> <em class="jxr_javadoccomment"> * Layered socket factory for TLS/SSL connections.</em>
-<a class="jxr_linenumber" name="46" href="#46">46</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="47" href="#47">47</a> <em class="jxr_javadoccomment"> * SSLSocketFactory can be used to validate the identity of the HTTPS server against a list of</em>
-<a class="jxr_linenumber" name="48" href="#48">48</a> <em class="jxr_javadoccomment"> * trusted certificates and to authenticate to the HTTPS server using a private key.</em>
-<a class="jxr_linenumber" name="49" href="#49">49</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="50" href="#50">50</a> <em class="jxr_javadoccomment"> * SSLSocketFactory will enable server authentication when supplied with</em>
-<a class="jxr_linenumber" name="51" href="#51">51</a> <em class="jxr_javadoccomment"> * a {@link java.security.KeyStore trust-store} file containing one or several trusted certificates. The client</em>
-<a class="jxr_linenumber" name="52" href="#52">52</a> <em class="jxr_javadoccomment"> * secure socket will reject the connection during the SSL session handshake if the target HTTPS</em>
-<a class="jxr_linenumber" name="53" href="#53">53</a> <em class="jxr_javadoccomment"> * server attempts to authenticate itself with a non-trusted certificate.</em>
-<a class="jxr_linenumber" name="54" href="#54">54</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="55" href="#55">55</a> <em class="jxr_javadoccomment"> * Use JDK keytool utility to import a trusted certificate and generate a trust-store file:</em>
-<a class="jxr_linenumber" name="56" href="#56">56</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a class="jxr_linenumber" name="57" href="#57">57</a> <em class="jxr_javadoccomment"> * keytool -import -alias "my server cert" -file server.crt -keystore my.truststore</em>
-<a class="jxr_linenumber" name="58" href="#58">58</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a class="jxr_linenumber" name="59" href="#59">59</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="60" href="#60">60</a> <em class="jxr_javadoccomment"> * In special cases the standard trust verification process can be bypassed by using a custom</em>
-<a class="jxr_linenumber" name="61" href="#61">61</a> <em class="jxr_javadoccomment"> * {@link org.apache.http.conn.ssl.TrustStrategy}. This interface is primarily intended for allowing self-signed</em>
-<a class="jxr_linenumber" name="62" href="#62">62</a> <em class="jxr_javadoccomment"> * certificates to be accepted as trusted without having to add them to the trust-store file.</em>
-<a class="jxr_linenumber" name="63" href="#63">63</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="64" href="#64">64</a> <em class="jxr_javadoccomment"> * SSLSocketFactory will enable client authentication when supplied with</em>
-<a class="jxr_linenumber" name="65" href="#65">65</a> <em class="jxr_javadoccomment"> * a {@link java.security.KeyStore key-store} file containing a private key/public certificate</em>
-<a class="jxr_linenumber" name="66" href="#66">66</a> <em class="jxr_javadoccomment"> * pair. The client secure socket will use the private key to authenticate</em>
-<a class="jxr_linenumber" name="67" href="#67">67</a> <em class="jxr_javadoccomment"> * itself to the target HTTPS server during the SSL session handshake if</em>
-<a class="jxr_linenumber" name="68" href="#68">68</a> <em class="jxr_javadoccomment"> * requested to do so by the server.</em>
-<a class="jxr_linenumber" name="69" href="#69">69</a> <em class="jxr_javadoccomment"> * The target HTTPS server will in its turn verify the certificate presented</em>
-<a class="jxr_linenumber" name="70" href="#70">70</a> <em class="jxr_javadoccomment"> * by the client in order to establish client's authenticity.</em>
-<a class="jxr_linenumber" name="71" href="#71">71</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="72" href="#72">72</a> <em class="jxr_javadoccomment"> * Use the following sequence of actions to generate a key-store file</em>
-<a class="jxr_linenumber" name="73" href="#73">73</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="74" href="#74">74</a> <em class="jxr_javadoccomment"> * <ul></em>
-<a class="jxr_linenumber" name="75" href="#75">75</a> <em class="jxr_javadoccomment"> * <li></em>
-<a class="jxr_linenumber" name="76" href="#76">76</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="77" href="#77">77</a> <em class="jxr_javadoccomment"> * Use JDK keytool utility to generate a new key</em>
-<a class="jxr_linenumber" name="78" href="#78">78</a> <em class="jxr_javadoccomment"> * <pre>keytool -genkey -v -alias "my client key" -validity 365 -keystore my.keystore</pre></em>
-<a class="jxr_linenumber" name="79" href="#79">79</a> <em class="jxr_javadoccomment"> * For simplicity use the same password for the key as that of the key-store</em>
-<a class="jxr_linenumber" name="80" href="#80">80</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="81" href="#81">81</a> <em class="jxr_javadoccomment"> * </li></em>
-<a class="jxr_linenumber" name="82" href="#82">82</a> <em class="jxr_javadoccomment"> * <li></em>
-<a class="jxr_linenumber" name="83" href="#83">83</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="84" href="#84">84</a> <em class="jxr_javadoccomment"> * Issue a certificate signing request (CSR)</em>
-<a class="jxr_linenumber" name="85" href="#85">85</a> <em class="jxr_javadoccomment"> * <pre>keytool -certreq -alias "my client key" -file mycertreq.csr -keystore my.keystore</pre></em>
-<a class="jxr_linenumber" name="86" href="#86">86</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="87" href="#87">87</a> <em class="jxr_javadoccomment"> * </li></em>
-<a class="jxr_linenumber" name="88" href="#88">88</a> <em class="jxr_javadoccomment"> * <li></em>
-<a class="jxr_linenumber" name="89" href="#89">89</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="90" href="#90">90</a> <em class="jxr_javadoccomment"> * Send the certificate request to the trusted Certificate Authority for signature.</em>
-<a class="jxr_linenumber" name="91" href="#91">91</a> <em class="jxr_javadoccomment"> * One may choose to act as her own CA and sign the certificate request using a PKI</em>
-<a class="jxr_linenumber" name="92" href="#92">92</a> <em class="jxr_javadoccomment"> * tool, such as OpenSSL.</em>
-<a class="jxr_linenumber" name="93" href="#93">93</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="94" href="#94">94</a> <em class="jxr_javadoccomment"> * </li></em>
-<a class="jxr_linenumber" name="95" href="#95">95</a> <em class="jxr_javadoccomment"> * <li></em>
-<a class="jxr_linenumber" name="96" href="#96">96</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="97" href="#97">97</a> <em class="jxr_javadoccomment"> * Import the trusted CA root certificate</em>
-<a class="jxr_linenumber" name="98" href="#98">98</a> <em class="jxr_javadoccomment"> * <pre>keytool -import -alias "my trusted ca" -file caroot.crt -keystore my.keystore</pre></em>
-<a class="jxr_linenumber" name="99" href="#99">99</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="100" href="#100">100</a> <em class="jxr_javadoccomment"> * </li></em>
-<a class="jxr_linenumber" name="101" href="#101">101</a> <em class="jxr_javadoccomment"> * <li></em>
-<a class="jxr_linenumber" name="102" href="#102">102</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="103" href="#103">103</a> <em class="jxr_javadoccomment"> * Import the PKCS#7 file containg the complete certificate chain</em>
-<a class="jxr_linenumber" name="104" href="#104">104</a> <em class="jxr_javadoccomment"> * <pre>keytool -import -alias "my client key" -file mycert.p7 -keystore my.keystore</pre></em>
-<a class="jxr_linenumber" name="105" href="#105">105</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="106" href="#106">106</a> <em class="jxr_javadoccomment"> * </li></em>
-<a class="jxr_linenumber" name="107" href="#107">107</a> <em class="jxr_javadoccomment"> * <li></em>
-<a class="jxr_linenumber" name="108" href="#108">108</a> <em class="jxr_javadoccomment"> * <p></em>
-<a class="jxr_linenumber" name="109" href="#109">109</a> <em class="jxr_javadoccomment"> * Verify the content the resultant keystore file</em>
-<a class="jxr_linenumber" name="110" href="#110">110</a> <em class="jxr_javadoccomment"> * <pre>keytool -list -v -keystore my.keystore</pre></em>
-<a class="jxr_linenumber" name="111" href="#111">111</a> <em class="jxr_javadoccomment"> * </p></em>
-<a class="jxr_linenumber" name="112" href="#112">112</a> <em class="jxr_javadoccomment"> * </li></em>
-<a class="jxr_linenumber" name="113" href="#113">113</a> <em class="jxr_javadoccomment"> * </ul></em>
-<a class="jxr_linenumber" name="114" href="#114">114</a> <em class="jxr_javadoccomment"> *</em>
-<a class="jxr_linenumber" name="115" href="#115">115</a> <em class="jxr_javadoccomment"> * @since 4.0</em>
-<a class="jxr_linenumber" name="116" href="#116">116</a> <em class="jxr_javadoccomment"> */</em>
-<a class="jxr_linenumber" name="117" href="#117">117</a> @ThreadSafe
-<a class="jxr_linenumber" name="118" href="#118">118</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a> <strong class="jxr_keyword">implements</strong> <a href="../../../../../org/apache/http/conn/socket/LayeredConnectionSocketFactory.html">LayeredConnectionSocketFactory</a> {
-<a class="jxr_linenumber" name="119" href="#119">119</a>
-<a class="jxr_linenumber" name="120" href="#120">120</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TLS = <span class="jxr_string">"TLS"</span>;
-<a class="jxr_linenumber" name="121" href="#121">121</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SSL = <span class="jxr_string">"SSL"</span>;
-<a class="jxr_linenumber" name="122" href="#122">122</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SSLV2 = <span class="jxr_string">"SSLv2"</span>;
-<a class="jxr_linenumber" name="123" href="#123">123</a>
-<a class="jxr_linenumber" name="124" href="#124">124</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> ALLOW_ALL_HOSTNAME_VERIFIER
-<a class="jxr_linenumber" name="125" href="#125">125</a> = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/AllowAllHostnameVerifier.html">AllowAllHostnameVerifier</a>();
-<a class="jxr_linenumber" name="126" href="#126">126</a>
-<a class="jxr_linenumber" name="127" href="#127">127</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER
-<a class="jxr_linenumber" name="128" href="#128">128</a> = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/BrowserCompatHostnameVerifier.html">BrowserCompatHostnameVerifier</a>();
-<a class="jxr_linenumber" name="129" href="#129">129</a>
-<a class="jxr_linenumber" name="130" href="#130">130</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> STRICT_HOSTNAME_VERIFIER
-<a class="jxr_linenumber" name="131" href="#131">131</a> = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/StrictHostnameVerifier.html">StrictHostnameVerifier</a>();
-<a class="jxr_linenumber" name="132" href="#132">132</a>
-<a class="jxr_linenumber" name="133" href="#133">133</a> <em class="jxr_javadoccomment">/**</em>
-<a class="jxr_linenumber" name="134" href="#134">134</a> <em class="jxr_javadoccomment"> * Obtains default SSL socket factory with an SSL context based on the standard JSSE</em>
-<a class="jxr_linenumber" name="135" href="#135">135</a> <em class="jxr_javadoccomment"> * trust material (<code>cacerts</code> file in the security properties directory).</em>
-<a class="jxr_linenumber" name="136" href="#136">136</a> <em class="jxr_javadoccomment"> * System properties are not taken into consideration.</em>
-<a class="jxr_linenumber" name="137" href="#137">137</a> <em class="jxr_javadoccomment"> *</em>
-<a class="jxr_linenumber" name="138" href="#138">138</a> <em class="jxr_javadoccomment"> * @return default SSL socket factory</em>
-<a class="jxr_linenumber" name="139" href="#139">139</a> <em class="jxr_javadoccomment"> */</em>
-<a class="jxr_linenumber" name="140" href="#140">140</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a> getSocketFactory() <strong class="jxr_keyword">throws</strong> SSLInitializationException {
-<a class="jxr_linenumber" name="141" href="#141">141</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
-<a class="jxr_linenumber" name="142" href="#142">142</a> SSLContexts.createDefault(),
-<a class="jxr_linenumber" name="143" href="#143">143</a> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
-<a class="jxr_linenumber" name="144" href="#144">144</a> }
-<a class="jxr_linenumber" name="145" href="#145">145</a>
-<a class="jxr_linenumber" name="146" href="#146">146</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> String[] split(<strong class="jxr_keyword">final</strong> String s) {
-<a class="jxr_linenumber" name="147" href="#147">147</a> <strong class="jxr_keyword">if</strong> (TextUtils.isBlank(s)) {
-<a class="jxr_linenumber" name="148" href="#148">148</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">null</strong>;
-<a class="jxr_linenumber" name="149" href="#149">149</a> }
-<a class="jxr_linenumber" name="150" href="#150">150</a> <strong class="jxr_keyword">return</strong> s.split(<span class="jxr_string">" *, *"</span>);
-<a class="jxr_linenumber" name="151" href="#151">151</a> }
-<a class="jxr_linenumber" name="152" href="#152">152</a>
-<a class="jxr_linenumber" name="153" href="#153">153</a> <em class="jxr_javadoccomment">/**</em>
-<a class="jxr_linenumber" name="154" href="#154">154</a> <em class="jxr_javadoccomment"> * Obtains default SSL socket factory with an SSL context based on system properties</em>
-<a class="jxr_linenumber" name="155" href="#155">155</a> <em class="jxr_javadoccomment"> * as described in</em>
-<a class="jxr_linenumber" name="156" href="#156">156</a> <em class="jxr_javadoccomment"> * <a href="<a href="http://docs.oracle.com/javase/1.5.0/docs/guide/security/jsse/JSSERefGuide.html" target="alexandria_uri">http://docs.oracle.com/javase/1.5.0/docs/guide/security/jsse/JSSERefGuide.html</a>"></em>
-<a class="jxr_linenumber" name="157" href="#157">157</a> <em class="jxr_javadoccomment"> * "JavaTM Secure Socket Extension (JSSE) Reference Guide for the JavaTM 2 Platform</em>
-<a class="jxr_linenumber" name="158" href="#158">158</a> <em class="jxr_javadoccomment"> * Standard Edition 5</a></em>
-<a class="jxr_linenumber" name="159" href="#159">159</a> <em class="jxr_javadoccomment"> *</em>
-<a class="jxr_linenumber" name="160" href="#160">160</a> <em class="jxr_javadoccomment"> * @return default system SSL socket factory</em>
-<a class="jxr_linenumber" name="161" href="#161">161</a> <em class="jxr_javadoccomment"> */</em>
-<a class="jxr_linenumber" name="162" href="#162">162</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a> getSystemSocketFactory() <strong class="jxr_keyword">throws</strong> SSLInitializationException {
-<a class="jxr_linenumber" name="163" href="#163">163</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
-<a class="jxr_linenumber" name="164" href="#164">164</a> (javax.net.ssl.SSLSocketFactory) javax.net.ssl.SSLSocketFactory.getDefault(),
-<a class="jxr_linenumber" name="165" href="#165">165</a> split(System.getProperty(<span class="jxr_string">"https.protocols"</span>)),
-<a class="jxr_linenumber" name="166" href="#166">166</a> split(System.getProperty(<span class="jxr_string">"https.cipherSuites"</span>)),
-<a class="jxr_linenumber" name="167" href="#167">167</a> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
-<a class="jxr_linenumber" name="168" href="#168">168</a> }
-<a class="jxr_linenumber" name="169" href="#169">169</a>
-<a class="jxr_linenumber" name="170" href="#170">170</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> javax.net.ssl.SSLSocketFactory socketfactory;
-<a class="jxr_linenumber" name="171" href="#171">171</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier;
-<a class="jxr_linenumber" name="172" href="#172">172</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> String[] supportedProtocols;
-<a class="jxr_linenumber" name="173" href="#173">173</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> String[] supportedCipherSuites;
-<a class="jxr_linenumber" name="174" href="#174">174</a>
-<a class="jxr_linenumber" name="175" href="#175">175</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(<strong class="jxr_keyword">final</strong> SSLContext sslContext) {
-<a class="jxr_linenumber" name="176" href="#176">176</a> <strong class="jxr_keyword">this</strong>(sslContext, BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
-<a class="jxr_linenumber" name="177" href="#177">177</a> }
-<a class="jxr_linenumber" name="178" href="#178">178</a>
-<a class="jxr_linenumber" name="179" href="#179">179</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
-<a class="jxr_linenumber" name="180" href="#180">180</a> <strong class="jxr_keyword">final</strong> SSLContext sslContext, <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
-<a class="jxr_linenumber" name="181" href="#181">181</a> <strong class="jxr_keyword">this</strong>(Args.notNull(sslContext, <span class="jxr_string">"SSL context"</span>).getSocketFactory(),
-<a class="jxr_linenumber" name="182" href="#182">182</a> <strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">null</strong>, hostnameVerifier);
-<a class="jxr_linenumber" name="183" href="#183">183</a> }
-<a class="jxr_linenumber" name="184" href="#184">184</a>
-<a class="jxr_linenumber" name="185" href="#185">185</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
-<a class="jxr_linenumber" name="186" href="#186">186</a> <strong class="jxr_keyword">final</strong> SSLContext sslContext,
-<a class="jxr_linenumber" name="187" href="#187">187</a> <strong class="jxr_keyword">final</strong> String[] supportedProtocols,
-<a class="jxr_linenumber" name="188" href="#188">188</a> <strong class="jxr_keyword">final</strong> String[] supportedCipherSuites,
-<a class="jxr_linenumber" name="189" href="#189">189</a> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
-<a class="jxr_linenumber" name="190" href="#190">190</a> <strong class="jxr_keyword">this</strong>(Args.notNull(sslContext, <span class="jxr_string">"SSL context"</span>).getSocketFactory(),
-<a class="jxr_linenumber" name="191" href="#191">191</a> supportedProtocols, supportedCipherSuites, hostnameVerifier);
-<a class="jxr_linenumber" name="192" href="#192">192</a> }
-<a class="jxr_linenumber" name="193" href="#193">193</a>
-<a class="jxr_linenumber" name="194" href="#194">194</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
-<a class="jxr_linenumber" name="195" href="#195">195</a> <strong class="jxr_keyword">final</strong> javax.net.ssl.SSLSocketFactory socketfactory,
-<a class="jxr_linenumber" name="196" href="#196">196</a> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
-<a class="jxr_linenumber" name="197" href="#197">197</a> <strong class="jxr_keyword">this</strong>(socketfactory, <strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">null</strong>, hostnameVerifier);
-<a class="jxr_linenumber" name="198" href="#198">198</a> }
-<a class="jxr_linenumber" name="199" href="#199">199</a>
-<a class="jxr_linenumber" name="200" href="#200">200</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
-<a class="jxr_linenumber" name="201" href="#201">201</a> <strong class="jxr_keyword">final</strong> javax.net.ssl.SSLSocketFactory socketfactory,
-<a class="jxr_linenumber" name="202" href="#202">202</a> <strong class="jxr_keyword">final</strong> String[] supportedProtocols,
-<a class="jxr_linenumber" name="203" href="#203">203</a> <strong class="jxr_keyword">final</strong> String[] supportedCipherSuites,
-<a class="jxr_linenumber" name="204" href="#204">204</a> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
-<a class="jxr_linenumber" name="205" href="#205">205</a> <strong class="jxr_keyword">this</strong>.socketfactory = Args.notNull(socketfactory, <span class="jxr_string">"SSL socket factory"</span>);
-<a class="jxr_linenumber" name="206" href="#206">206</a> <strong class="jxr_keyword">this</strong>.supportedProtocols = supportedProtocols;
-<a class="jxr_linenumber" name="207" href="#207">207</a> <strong class="jxr_keyword">this</strong>.supportedCipherSuites = supportedCipherSuites;
-<a class="jxr_linenumber" name="208" href="#208">208</a> <strong class="jxr_keyword">this</strong>.hostnameVerifier = hostnameVerifier != <strong class="jxr_keyword">null</strong> ? hostnameVerifier : BROWSER_COMPATIBLE_HOSTNAME_VERIFIER;
-<a class="jxr_linenumber" name="209" href="#209">209</a> }
-<a class="jxr_linenumber" name="210" href="#210">210</a>
-<a class="jxr_linenumber" name="211" href="#211">211</a> <em class="jxr_javadoccomment">/**</em>
-<a class="jxr_linenumber" name="212" href="#212">212</a> <em class="jxr_javadoccomment"> * Performs any custom initialization for a newly created SSLSocket</em>
-<a class="jxr_linenumber" name="213" href="#213">213</a> <em class="jxr_javadoccomment"> * (before the SSL handshake happens).</em>
-<a class="jxr_linenumber" name="214" href="#214">214</a> <em class="jxr_javadoccomment"> *</em>
-<a class="jxr_linenumber" name="215" href="#215">215</a> <em class="jxr_javadoccomment"> * The default implementation is a no-op, but could be overridden to, e.g.,</em>
-<a class="jxr_linenumber" name="216" href="#216">216</a> <em class="jxr_javadoccomment"> * call {@link javax.net.ssl.SSLSocket#setEnabledCipherSuites(String[])}.</em>
-<a class="jxr_linenumber" name="217" href="#217">217</a> <em class="jxr_javadoccomment"> */</em>
-<a class="jxr_linenumber" name="218" href="#218">218</a> <strong class="jxr_keyword">protected</strong> <strong class="jxr_keyword">void</strong> prepareSocket(<strong class="jxr_keyword">final</strong> SSLSocket socket) <strong class="jxr_keyword">throws</strong> IOException {
-<a class="jxr_linenumber" name="219" href="#219">219</a> }
-<a class="jxr_linenumber" name="220" href="#220">220</a>
-<a class="jxr_linenumber" name="221" href="#221">221</a> <strong class="jxr_keyword">public</strong> Socket createSocket(<strong class="jxr_keyword">final</strong> HttpContext context) <strong class="jxr_keyword">throws</strong> IOException {
-<a class="jxr_linenumber" name="222" href="#222">222</a> <strong class="jxr_keyword">return</strong> SocketFactory.getDefault().createSocket();
-<a class="jxr_linenumber" name="223" href="#223">223</a> }
-<a class="jxr_linenumber" name="224" href="#224">224</a>
-<a class="jxr_linenumber" name="225" href="#225">225</a> <strong class="jxr_keyword">public</strong> Socket connectSocket(
-<a class="jxr_linenumber" name="226" href="#226">226</a> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> connectTimeout,
-<a class="jxr_linenumber" name="227" href="#227">227</a> <strong class="jxr_keyword">final</strong> Socket socket,
-<a class="jxr_linenumber" name="228" href="#228">228</a> <strong class="jxr_keyword">final</strong> HttpHost host,
-<a class="jxr_linenumber" name="229" href="#229">229</a> <strong class="jxr_keyword">final</strong> InetSocketAddress remoteAddress,
-<a class="jxr_linenumber" name="230" href="#230">230</a> <strong class="jxr_keyword">final</strong> InetSocketAddress localAddress,
-<a class="jxr_linenumber" name="231" href="#231">231</a> <strong class="jxr_keyword">final</strong> HttpContext context) <strong class="jxr_keyword">throws</strong> IOException {
-<a class="jxr_linenumber" name="232" href="#232">232</a> Args.notNull(host, <span class="jxr_string">"HTTP host"</span>);
-<a class="jxr_linenumber" name="233" href="#233">233</a> Args.notNull(remoteAddress, <span class="jxr_string">"Remote address"</span>);
-<a class="jxr_linenumber" name="234" href="#234">234</a> <strong class="jxr_keyword">final</strong> Socket sock = socket != <strong class="jxr_keyword">null</strong> ? socket : createSocket(context);
-<a class="jxr_linenumber" name="235" href="#235">235</a> <strong class="jxr_keyword">if</strong> (localAddress != <strong class="jxr_keyword">null</strong>) {
-<a class="jxr_linenumber" name="236" href="#236">236</a> sock.bind(localAddress);
-<a class="jxr_linenumber" name="237" href="#237">237</a> }
-<a class="jxr_linenumber" name="238" href="#238">238</a> <strong class="jxr_keyword">try</strong> {
-<a class="jxr_linenumber" name="239" href="#239">239</a> sock.connect(remoteAddress, connectTimeout);
-<a class="jxr_linenumber" name="240" href="#240">240</a> } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> IOException ex) {
-<a class="jxr_linenumber" name="241" href="#241">241</a> <strong class="jxr_keyword">try</strong> {
-<a class="jxr_linenumber" name="242" href="#242">242</a> sock.close();
-<a class="jxr_linenumber" name="243" href="#243">243</a> } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> IOException ignore) {
-<a class="jxr_linenumber" name="244" href="#244">244</a> }
-<a class="jxr_linenumber" name="245" href="#245">245</a> <strong class="jxr_keyword">throw</strong> ex;
-<a class="jxr_linenumber" name="246" href="#246">246</a> }
-<a class="jxr_linenumber" name="247" href="#247">247</a> <em class="jxr_comment">// Setup SSL layering if necessary</em>
-<a class="jxr_linenumber" name="248" href="#248">248</a> <strong class="jxr_keyword">if</strong> (sock instanceof SSLSocket) {
-<a class="jxr_linenumber" name="249" href="#249">249</a> <strong class="jxr_keyword">final</strong> SSLSocket sslsock = (SSLSocket) sock;
-<a class="jxr_linenumber" name="250" href="#250">250</a> sslsock.startHandshake();
-<a class="jxr_linenumber" name="251" href="#251">251</a> verifyHostname(sslsock, host.getHostName());
-<a class="jxr_linenumber" name="252" href="#252">252</a> <strong class="jxr_keyword">return</strong> sock;
-<a class="jxr_linenumber" name="253" href="#253">253</a> } <strong class="jxr_keyword">else</strong> {
-<a class="jxr_linenumber" name="254" href="#254">254</a> <strong class="jxr_keyword">return</strong> createLayeredSocket(sock, host.getHostName(), remoteAddress.getPort(), context);
-<a class="jxr_linenumber" name="255" href="#255">255</a> }
-<a class="jxr_linenumber" name="256" href="#256">256</a> }
-<a class="jxr_linenumber" name="257" href="#257">257</a>
-<a class="jxr_linenumber" name="258" href="#258">258</a> <strong class="jxr_keyword">public</strong> Socket createLayeredSocket(
-<a class="jxr_linenumber" name="259" href="#259">259</a> <strong class="jxr_keyword">final</strong> Socket socket,
-<a class="jxr_linenumber" name="260" href="#260">260</a> <strong class="jxr_keyword">final</strong> String target,
-<a class="jxr_linenumber" name="261" href="#261">261</a> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> port,
-<a class="jxr_linenumber" name="262" href="#262">262</a> <strong class="jxr_keyword">final</strong> HttpContext context) <strong class="jxr_keyword">throws</strong> IOException {
-<a class="jxr_linenumber" name="263" href="#263">263</a> <strong class="jxr_keyword">final</strong> SSLSocket sslsock = (SSLSocket) <strong class="jxr_keyword">this</strong>.socketfactory.createSocket(
-<a class="jxr_linenumber" name="264" href="#264">264</a> socket,
-<a class="jxr_linenumber" name="265" href="#265">265</a> target,
-<a class="jxr_linenumber" name="266" href="#266">266</a> port,
-<a class="jxr_linenumber" name="267" href="#267">267</a> <strong class="jxr_keyword">true</strong>);
-<a class="jxr_linenumber" name="268" href="#268">268</a> <strong class="jxr_keyword">if</strong> (supportedProtocols != <strong class="jxr_keyword">null</strong>) {
-<a class="jxr_linenumber" name="269" href="#269">269</a> sslsock.setEnabledProtocols(supportedProtocols);
-<a class="jxr_linenumber" name="270" href="#270">270</a> }
-<a class="jxr_linenumber" name="271" href="#271">271</a> <strong class="jxr_keyword">if</strong> (supportedCipherSuites != <strong class="jxr_keyword">null</strong>) {
-<a class="jxr_linenumber" name="272" href="#272">272</a> sslsock.setEnabledCipherSuites(supportedCipherSuites);
-<a class="jxr_linenumber" name="273" href="#273">273</a> }
-<a class="jxr_linenumber" name="274" href="#274">274</a> prepareSocket(sslsock);
-<a class="jxr_linenumber" name="275" href="#275">275</a> sslsock.startHandshake();
-<a class="jxr_linenumber" name="276" href="#276">276</a> verifyHostname(sslsock, target);
-<a class="jxr_linenumber" name="277" href="#277">277</a> <strong class="jxr_keyword">return</strong> sslsock;
-<a class="jxr_linenumber" name="278" href="#278">278</a> }
-<a class="jxr_linenumber" name="279" href="#279">279</a>
-<a class="jxr_linenumber" name="280" href="#280">280</a> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> getHostnameVerifier() {
-<a class="jxr_linenumber" name="281" href="#281">281</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">this</strong>.hostnameVerifier;
-<a class="jxr_linenumber" name="282" href="#282">282</a> }
-<a class="jxr_linenumber" name="283" href="#283">283</a>
-<a class="jxr_linenumber" name="284" href="#284">284</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> verifyHostname(<strong class="jxr_keyword">final</strong> SSLSocket sslsock, <strong class="jxr_keyword">final</strong> String hostname) <strong class="jxr_keyword">throws</strong> IOException {
-<a class="jxr_linenumber" name="285" href="#285">285</a> <strong class="jxr_keyword">try</strong> {
-<a class="jxr_linenumber" name="286" href="#286">286</a> <strong class="jxr_keyword">this</strong>.hostnameVerifier.verify(hostname, sslsock);
-<a class="jxr_linenumber" name="287" href="#287">287</a> <em class="jxr_comment">// verifyHostName() didn't blowup - good!</em>
-<a class="jxr_linenumber" name="288" href="#288">288</a> } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> IOException iox) {
-<a class="jxr_linenumber" name="289" href="#289">289</a> <em class="jxr_comment">// close the socket before re-throwing the exception</em>
-<a class="jxr_linenumber" name="290" href="#290">290</a> <strong class="jxr_keyword">try</strong> { sslsock.close(); } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> Exception x) { <em class="jxr_comment">/*<em class="jxr_comment">ignore*/</em> }</em>
-<a class="jxr_linenumber" name="291" href="#291">291</a> <strong class="jxr_keyword">throw</strong> iox;
-<a class="jxr_linenumber" name="292" href="#292">292</a> }
+<a class="jxr_linenumber" name="43" href="#43">43</a> <strong class="jxr_keyword">import</strong> java.util.ArrayList;
+<a class="jxr_linenumber" name="44" href="#44">44</a> <strong class="jxr_keyword">import</strong> java.util.List;
+<a class="jxr_linenumber" name="45" href="#45">45</a>
+<a class="jxr_linenumber" name="46" href="#46">46</a> <em class="jxr_javadoccomment">/**</em>
+<a class="jxr_linenumber" name="47" href="#47">47</a> <em class="jxr_javadoccomment"> * Layered socket factory for TLS/SSL connections.</em>
+<a class="jxr_linenumber" name="48" href="#48">48</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="49" href="#49">49</a> <em class="jxr_javadoccomment"> * SSLSocketFactory can be used to validate the identity of the HTTPS server against a list of</em>
+<a class="jxr_linenumber" name="50" href="#50">50</a> <em class="jxr_javadoccomment"> * trusted certificates and to authenticate to the HTTPS server using a private key.</em>
+<a class="jxr_linenumber" name="51" href="#51">51</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="52" href="#52">52</a> <em class="jxr_javadoccomment"> * SSLSocketFactory will enable server authentication when supplied with</em>
+<a class="jxr_linenumber" name="53" href="#53">53</a> <em class="jxr_javadoccomment"> * a {@link java.security.KeyStore trust-store} file containing one or several trusted certificates. The client</em>
+<a class="jxr_linenumber" name="54" href="#54">54</a> <em class="jxr_javadoccomment"> * secure socket will reject the connection during the SSL session handshake if the target HTTPS</em>
+<a class="jxr_linenumber" name="55" href="#55">55</a> <em class="jxr_javadoccomment"> * server attempts to authenticate itself with a non-trusted certificate.</em>
+<a class="jxr_linenumber" name="56" href="#56">56</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="57" href="#57">57</a> <em class="jxr_javadoccomment"> * Use JDK keytool utility to import a trusted certificate and generate a trust-store file:</em>
+<a class="jxr_linenumber" name="58" href="#58">58</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a class="jxr_linenumber" name="59" href="#59">59</a> <em class="jxr_javadoccomment"> * keytool -import -alias "my server cert" -file server.crt -keystore my.truststore</em>
+<a class="jxr_linenumber" name="60" href="#60">60</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a class="jxr_linenumber" name="61" href="#61">61</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="62" href="#62">62</a> <em class="jxr_javadoccomment"> * In special cases the standard trust verification process can be bypassed by using a custom</em>
+<a class="jxr_linenumber" name="63" href="#63">63</a> <em class="jxr_javadoccomment"> * {@link org.apache.http.conn.ssl.TrustStrategy}. This interface is primarily intended for allowing self-signed</em>
+<a class="jxr_linenumber" name="64" href="#64">64</a> <em class="jxr_javadoccomment"> * certificates to be accepted as trusted without having to add them to the trust-store file.</em>
+<a class="jxr_linenumber" name="65" href="#65">65</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="66" href="#66">66</a> <em class="jxr_javadoccomment"> * SSLSocketFactory will enable client authentication when supplied with</em>
+<a class="jxr_linenumber" name="67" href="#67">67</a> <em class="jxr_javadoccomment"> * a {@link java.security.KeyStore key-store} file containing a private key/public certificate</em>
+<a class="jxr_linenumber" name="68" href="#68">68</a> <em class="jxr_javadoccomment"> * pair. The client secure socket will use the private key to authenticate</em>
+<a class="jxr_linenumber" name="69" href="#69">69</a> <em class="jxr_javadoccomment"> * itself to the target HTTPS server during the SSL session handshake if</em>
+<a class="jxr_linenumber" name="70" href="#70">70</a> <em class="jxr_javadoccomment"> * requested to do so by the server.</em>
+<a class="jxr_linenumber" name="71" href="#71">71</a> <em class="jxr_javadoccomment"> * The target HTTPS server will in its turn verify the certificate presented</em>
+<a class="jxr_linenumber" name="72" href="#72">72</a> <em class="jxr_javadoccomment"> * by the client in order to establish client's authenticity.</em>
+<a class="jxr_linenumber" name="73" href="#73">73</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="74" href="#74">74</a> <em class="jxr_javadoccomment"> * Use the following sequence of actions to generate a key-store file</em>
+<a class="jxr_linenumber" name="75" href="#75">75</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="76" href="#76">76</a> <em class="jxr_javadoccomment"> * <ul></em>
+<a class="jxr_linenumber" name="77" href="#77">77</a> <em class="jxr_javadoccomment"> * <li></em>
+<a class="jxr_linenumber" name="78" href="#78">78</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="79" href="#79">79</a> <em class="jxr_javadoccomment"> * Use JDK keytool utility to generate a new key</em>
+<a class="jxr_linenumber" name="80" href="#80">80</a> <em class="jxr_javadoccomment"> * <pre>keytool -genkey -v -alias "my client key" -validity 365 -keystore my.keystore</pre></em>
+<a class="jxr_linenumber" name="81" href="#81">81</a> <em class="jxr_javadoccomment"> * For simplicity use the same password for the key as that of the key-store</em>
+<a class="jxr_linenumber" name="82" href="#82">82</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="83" href="#83">83</a> <em class="jxr_javadoccomment"> * </li></em>
+<a class="jxr_linenumber" name="84" href="#84">84</a> <em class="jxr_javadoccomment"> * <li></em>
+<a class="jxr_linenumber" name="85" href="#85">85</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="86" href="#86">86</a> <em class="jxr_javadoccomment"> * Issue a certificate signing request (CSR)</em>
+<a class="jxr_linenumber" name="87" href="#87">87</a> <em class="jxr_javadoccomment"> * <pre>keytool -certreq -alias "my client key" -file mycertreq.csr -keystore my.keystore</pre></em>
+<a class="jxr_linenumber" name="88" href="#88">88</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="89" href="#89">89</a> <em class="jxr_javadoccomment"> * </li></em>
+<a class="jxr_linenumber" name="90" href="#90">90</a> <em class="jxr_javadoccomment"> * <li></em>
+<a class="jxr_linenumber" name="91" href="#91">91</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="92" href="#92">92</a> <em class="jxr_javadoccomment"> * Send the certificate request to the trusted Certificate Authority for signature.</em>
+<a class="jxr_linenumber" name="93" href="#93">93</a> <em class="jxr_javadoccomment"> * One may choose to act as her own CA and sign the certificate request using a PKI</em>
+<a class="jxr_linenumber" name="94" href="#94">94</a> <em class="jxr_javadoccomment"> * tool, such as OpenSSL.</em>
+<a class="jxr_linenumber" name="95" href="#95">95</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="96" href="#96">96</a> <em class="jxr_javadoccomment"> * </li></em>
+<a class="jxr_linenumber" name="97" href="#97">97</a> <em class="jxr_javadoccomment"> * <li></em>
+<a class="jxr_linenumber" name="98" href="#98">98</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="99" href="#99">99</a> <em class="jxr_javadoccomment"> * Import the trusted CA root certificate</em>
+<a class="jxr_linenumber" name="100" href="#100">100</a> <em class="jxr_javadoccomment"> * <pre>keytool -import -alias "my trusted ca" -file caroot.crt -keystore my.keystore</pre></em>
+<a class="jxr_linenumber" name="101" href="#101">101</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="102" href="#102">102</a> <em class="jxr_javadoccomment"> * </li></em>
+<a class="jxr_linenumber" name="103" href="#103">103</a> <em class="jxr_javadoccomment"> * <li></em>
+<a class="jxr_linenumber" name="104" href="#104">104</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="105" href="#105">105</a> <em class="jxr_javadoccomment"> * Import the PKCS#7 file containg the complete certificate chain</em>
+<a class="jxr_linenumber" name="106" href="#106">106</a> <em class="jxr_javadoccomment"> * <pre>keytool -import -alias "my client key" -file mycert.p7 -keystore my.keystore</pre></em>
+<a class="jxr_linenumber" name="107" href="#107">107</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="108" href="#108">108</a> <em class="jxr_javadoccomment"> * </li></em>
+<a class="jxr_linenumber" name="109" href="#109">109</a> <em class="jxr_javadoccomment"> * <li></em>
+<a class="jxr_linenumber" name="110" href="#110">110</a> <em class="jxr_javadoccomment"> * <p></em>
+<a class="jxr_linenumber" name="111" href="#111">111</a> <em class="jxr_javadoccomment"> * Verify the content the resultant keystore file</em>
+<a class="jxr_linenumber" name="112" href="#112">112</a> <em class="jxr_javadoccomment"> * <pre>keytool -list -v -keystore my.keystore</pre></em>
+<a class="jxr_linenumber" name="113" href="#113">113</a> <em class="jxr_javadoccomment"> * </p></em>
+<a class="jxr_linenumber" name="114" href="#114">114</a> <em class="jxr_javadoccomment"> * </li></em>
+<a class="jxr_linenumber" name="115" href="#115">115</a> <em class="jxr_javadoccomment"> * </ul></em>
+<a class="jxr_linenumber" name="116" href="#116">116</a> <em class="jxr_javadoccomment"> *</em>
+<a class="jxr_linenumber" name="117" href="#117">117</a> <em class="jxr_javadoccomment"> * @since 4.0</em>
+<a class="jxr_linenumber" name="118" href="#118">118</a> <em class="jxr_javadoccomment"> */</em>
+<a class="jxr_linenumber" name="119" href="#119">119</a> @ThreadSafe
+<a class="jxr_linenumber" name="120" href="#120">120</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a> <strong class="jxr_keyword">implements</strong> <a href="../../../../../org/apache/http/conn/socket/LayeredConnectionSocketFactory.html">LayeredConnectionSocketFactory</a> {
+<a class="jxr_linenumber" name="121" href="#121">121</a>
+<a class="jxr_linenumber" name="122" href="#122">122</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TLS = <span class="jxr_string">"TLS"</span>;
+<a class="jxr_linenumber" name="123" href="#123">123</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SSL = <span class="jxr_string">"SSL"</span>;
+<a class="jxr_linenumber" name="124" href="#124">124</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SSLV2 = <span class="jxr_string">"SSLv2"</span>;
+<a class="jxr_linenumber" name="125" href="#125">125</a>
+<a class="jxr_linenumber" name="126" href="#126">126</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> ALLOW_ALL_HOSTNAME_VERIFIER
+<a class="jxr_linenumber" name="127" href="#127">127</a> = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/AllowAllHostnameVerifier.html">AllowAllHostnameVerifier</a>();
+<a class="jxr_linenumber" name="128" href="#128">128</a>
+<a class="jxr_linenumber" name="129" href="#129">129</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER
+<a class="jxr_linenumber" name="130" href="#130">130</a> = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/BrowserCompatHostnameVerifier.html">BrowserCompatHostnameVerifier</a>();
+<a class="jxr_linenumber" name="131" href="#131">131</a>
+<a class="jxr_linenumber" name="132" href="#132">132</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> STRICT_HOSTNAME_VERIFIER
+<a class="jxr_linenumber" name="133" href="#133">133</a> = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/StrictHostnameVerifier.html">StrictHostnameVerifier</a>();
+<a class="jxr_linenumber" name="134" href="#134">134</a>
+<a class="jxr_linenumber" name="135" href="#135">135</a> <em class="jxr_javadoccomment">/**</em>
+<a class="jxr_linenumber" name="136" href="#136">136</a> <em class="jxr_javadoccomment"> * Obtains default SSL socket factory with an SSL context based on the standard JSSE</em>
+<a class="jxr_linenumber" name="137" href="#137">137</a> <em class="jxr_javadoccomment"> * trust material (<code>cacerts</code> file in the security properties directory).</em>
+<a class="jxr_linenumber" name="138" href="#138">138</a> <em class="jxr_javadoccomment"> * System properties are not taken into consideration.</em>
+<a class="jxr_linenumber" name="139" href="#139">139</a> <em class="jxr_javadoccomment"> *</em>
+<a class="jxr_linenumber" name="140" href="#140">140</a> <em class="jxr_javadoccomment"> * @return default SSL socket factory</em>
+<a class="jxr_linenumber" name="141" href="#141">141</a> <em class="jxr_javadoccomment"> */</em>
+<a class="jxr_linenumber" name="142" href="#142">142</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a> getSocketFactory() <strong class="jxr_keyword">throws</strong> SSLInitializationException {
+<a class="jxr_linenumber" name="143" href="#143">143</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
+<a class="jxr_linenumber" name="144" href="#144">144</a> SSLContexts.createDefault(),
+<a class="jxr_linenumber" name="145" href="#145">145</a> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
+<a class="jxr_linenumber" name="146" href="#146">146</a> }
+<a class="jxr_linenumber" name="147" href="#147">147</a>
+<a class="jxr_linenumber" name="148" href="#148">148</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> String[] split(<strong class="jxr_keyword">final</strong> String s) {
+<a class="jxr_linenumber" name="149" href="#149">149</a> <strong class="jxr_keyword">if</strong> (TextUtils.isBlank(s)) {
+<a class="jxr_linenumber" name="150" href="#150">150</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">null</strong>;
+<a class="jxr_linenumber" name="151" href="#151">151</a> }
+<a class="jxr_linenumber" name="152" href="#152">152</a> <strong class="jxr_keyword">return</strong> s.split(<span class="jxr_string">" *, *"</span>);
+<a class="jxr_linenumber" name="153" href="#153">153</a> }
+<a class="jxr_linenumber" name="154" href="#154">154</a>
+<a class="jxr_linenumber" name="155" href="#155">155</a> <em class="jxr_javadoccomment">/**</em>
+<a class="jxr_linenumber" name="156" href="#156">156</a> <em class="jxr_javadoccomment"> * Obtains default SSL socket factory with an SSL context based on system properties</em>
+<a class="jxr_linenumber" name="157" href="#157">157</a> <em class="jxr_javadoccomment"> * as described in</em>
+<a class="jxr_linenumber" name="158" href="#158">158</a> <em class="jxr_javadoccomment"> * <a href="<a href="http://docs.oracle.com/javase/1.5.0/docs/guide/security/jsse/JSSERefGuide.html" target="alexandria_uri">http://docs.oracle.com/javase/1.5.0/docs/guide/security/jsse/JSSERefGuide.html</a>"></em>
+<a class="jxr_linenumber" name="159" href="#159">159</a> <em class="jxr_javadoccomment"> * "JavaTM Secure Socket Extension (JSSE) Reference Guide for the JavaTM 2 Platform</em>
+<a class="jxr_linenumber" name="160" href="#160">160</a> <em class="jxr_javadoccomment"> * Standard Edition 5</a></em>
+<a class="jxr_linenumber" name="161" href="#161">161</a> <em class="jxr_javadoccomment"> *</em>
+<a class="jxr_linenumber" name="162" href="#162">162</a> <em class="jxr_javadoccomment"> * @return default system SSL socket factory</em>
+<a class="jxr_linenumber" name="163" href="#163">163</a> <em class="jxr_javadoccomment"> */</em>
+<a class="jxr_linenumber" name="164" href="#164">164</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a> getSystemSocketFactory() <strong class="jxr_keyword">throws</strong> SSLInitializationException {
+<a class="jxr_linenumber" name="165" href="#165">165</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
+<a class="jxr_linenumber" name="166" href="#166">166</a> (javax.net.ssl.SSLSocketFactory) javax.net.ssl.SSLSocketFactory.getDefault(),
+<a class="jxr_linenumber" name="167" href="#167">167</a> split(System.getProperty(<span class="jxr_string">"https.protocols"</span>)),
+<a class="jxr_linenumber" name="168" href="#168">168</a> split(System.getProperty(<span class="jxr_string">"https.cipherSuites"</span>)),
+<a class="jxr_linenumber" name="169" href="#169">169</a> BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
+<a class="jxr_linenumber" name="170" href="#170">170</a> }
+<a class="jxr_linenumber" name="171" href="#171">171</a>
+<a class="jxr_linenumber" name="172" href="#172">172</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> javax.net.ssl.SSLSocketFactory socketfactory;
+<a class="jxr_linenumber" name="173" href="#173">173</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier;
+<a class="jxr_linenumber" name="174" href="#174">174</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> String[] supportedProtocols;
+<a class="jxr_linenumber" name="175" href="#175">175</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> String[] supportedCipherSuites;
+<a class="jxr_linenumber" name="176" href="#176">176</a>
+<a class="jxr_linenumber" name="177" href="#177">177</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(<strong class="jxr_keyword">final</strong> SSLContext sslContext) {
+<a class="jxr_linenumber" name="178" href="#178">178</a> <strong class="jxr_keyword">this</strong>(sslContext, BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
+<a class="jxr_linenumber" name="179" href="#179">179</a> }
+<a class="jxr_linenumber" name="180" href="#180">180</a>
+<a class="jxr_linenumber" name="181" href="#181">181</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
+<a class="jxr_linenumber" name="182" href="#182">182</a> <strong class="jxr_keyword">final</strong> SSLContext sslContext, <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
+<a class="jxr_linenumber" name="183" href="#183">183</a> <strong class="jxr_keyword">this</strong>(Args.notNull(sslContext, <span class="jxr_string">"SSL context"</span>).getSocketFactory(),
+<a class="jxr_linenumber" name="184" href="#184">184</a> <strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">null</strong>, hostnameVerifier);
+<a class="jxr_linenumber" name="185" href="#185">185</a> }
+<a class="jxr_linenumber" name="186" href="#186">186</a>
+<a class="jxr_linenumber" name="187" href="#187">187</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
+<a class="jxr_linenumber" name="188" href="#188">188</a> <strong class="jxr_keyword">final</strong> SSLContext sslContext,
+<a class="jxr_linenumber" name="189" href="#189">189</a> <strong class="jxr_keyword">final</strong> String[] supportedProtocols,
+<a class="jxr_linenumber" name="190" href="#190">190</a> <strong class="jxr_keyword">final</strong> String[] supportedCipherSuites,
+<a class="jxr_linenumber" name="191" href="#191">191</a> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
+<a class="jxr_linenumber" name="192" href="#192">192</a> <strong class="jxr_keyword">this</strong>(Args.notNull(sslContext, <span class="jxr_string">"SSL context"</span>).getSocketFactory(),
+<a class="jxr_linenumber" name="193" href="#193">193</a> supportedProtocols, supportedCipherSuites, hostnameVerifier);
+<a class="jxr_linenumber" name="194" href="#194">194</a> }
+<a class="jxr_linenumber" name="195" href="#195">195</a>
+<a class="jxr_linenumber" name="196" href="#196">196</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
+<a class="jxr_linenumber" name="197" href="#197">197</a> <strong class="jxr_keyword">final</strong> javax.net.ssl.SSLSocketFactory socketfactory,
+<a class="jxr_linenumber" name="198" href="#198">198</a> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
+<a class="jxr_linenumber" name="199" href="#199">199</a> <strong class="jxr_keyword">this</strong>(socketfactory, <strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">null</strong>, hostnameVerifier);
+<a class="jxr_linenumber" name="200" href="#200">200</a> }
+<a class="jxr_linenumber" name="201" href="#201">201</a>
+<a class="jxr_linenumber" name="202" href="#202">202</a> <strong class="jxr_keyword">public</strong> <a href="../../../../../org/apache/http/conn/ssl/SSLConnectionSocketFactory.html">SSLConnectionSocketFactory</a>(
+<a class="jxr_linenumber" name="203" href="#203">203</a> <strong class="jxr_keyword">final</strong> javax.net.ssl.SSLSocketFactory socketfactory,
+<a class="jxr_linenumber" name="204" href="#204">204</a> <strong class="jxr_keyword">final</strong> String[] supportedProtocols,
+<a class="jxr_linenumber" name="205" href="#205">205</a> <strong class="jxr_keyword">final</strong> String[] supportedCipherSuites,
+<a class="jxr_linenumber" name="206" href="#206">206</a> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> hostnameVerifier) {
+<a class="jxr_linenumber" name="207" href="#207">207</a> <strong class="jxr_keyword">this</strong>.socketfactory = Args.notNull(socketfactory, <span class="jxr_string">"SSL socket factory"</span>);
+<a class="jxr_linenumber" name="208" href="#208">208</a> <strong class="jxr_keyword">this</strong>.supportedProtocols = supportedProtocols;
+<a class="jxr_linenumber" name="209" href="#209">209</a> <strong class="jxr_keyword">this</strong>.supportedCipherSuites = supportedCipherSuites;
+<a class="jxr_linenumber" name="210" href="#210">210</a> <strong class="jxr_keyword">this</strong>.hostnameVerifier = hostnameVerifier != <strong class="jxr_keyword">null</strong> ? hostnameVerifier : BROWSER_COMPATIBLE_HOSTNAME_VERIFIER;
+<a class="jxr_linenumber" name="211" href="#211">211</a> }
+<a class="jxr_linenumber" name="212" href="#212">212</a>
+<a class="jxr_linenumber" name="213" href="#213">213</a> <em class="jxr_javadoccomment">/**</em>
+<a class="jxr_linenumber" name="214" href="#214">214</a> <em class="jxr_javadoccomment"> * Performs any custom initialization for a newly created SSLSocket</em>
+<a class="jxr_linenumber" name="215" href="#215">215</a> <em class="jxr_javadoccomment"> * (before the SSL handshake happens).</em>
+<a class="jxr_linenumber" name="216" href="#216">216</a> <em class="jxr_javadoccomment"> *</em>
+<a class="jxr_linenumber" name="217" href="#217">217</a> <em class="jxr_javadoccomment"> * The default implementation is a no-op, but could be overridden to, e.g.,</em>
+<a class="jxr_linenumber" name="218" href="#218">218</a> <em class="jxr_javadoccomment"> * call {@link javax.net.ssl.SSLSocket#setEnabledCipherSuites(String[])}.</em>
+<a class="jxr_linenumber" name="219" href="#219">219</a> <em class="jxr_javadoccomment"> */</em>
+<a class="jxr_linenumber" name="220" href="#220">220</a> <strong class="jxr_keyword">protected</strong> <strong class="jxr_keyword">void</strong> prepareSocket(<strong class="jxr_keyword">final</strong> SSLSocket socket) <strong class="jxr_keyword">throws</strong> IOException {
+<a class="jxr_linenumber" name="221" href="#221">221</a> }
+<a class="jxr_linenumber" name="222" href="#222">222</a>
+<a class="jxr_linenumber" name="223" href="#223">223</a> <strong class="jxr_keyword">public</strong> Socket createSocket(<strong class="jxr_keyword">final</strong> HttpContext context) <strong class="jxr_keyword">throws</strong> IOException {
+<a class="jxr_linenumber" name="224" href="#224">224</a> <strong class="jxr_keyword">return</strong> SocketFactory.getDefault().createSocket();
+<a class="jxr_linenumber" name="225" href="#225">225</a> }
+<a class="jxr_linenumber" name="226" href="#226">226</a>
+<a class="jxr_linenumber" name="227" href="#227">227</a> <strong class="jxr_keyword">public</strong> Socket connectSocket(
+<a class="jxr_linenumber" name="228" href="#228">228</a> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> connectTimeout,
+<a class="jxr_linenumber" name="229" href="#229">229</a> <strong class="jxr_keyword">final</strong> Socket socket,
+<a class="jxr_linenumber" name="230" href="#230">230</a> <strong class="jxr_keyword">final</strong> HttpHost host,
+<a class="jxr_linenumber" name="231" href="#231">231</a> <strong class="jxr_keyword">final</strong> InetSocketAddress remoteAddress,
+<a class="jxr_linenumber" name="232" href="#232">232</a> <strong class="jxr_keyword">final</strong> InetSocketAddress localAddress,
+<a class="jxr_linenumber" name="233" href="#233">233</a> <strong class="jxr_keyword">final</strong> HttpContext context) <strong class="jxr_keyword">throws</strong> IOException {
+<a class="jxr_linenumber" name="234" href="#234">234</a> Args.notNull(host, <span class="jxr_string">"HTTP host"</span>);
+<a class="jxr_linenumber" name="235" href="#235">235</a> Args.notNull(remoteAddress, <span class="jxr_string">"Remote address"</span>);
+<a class="jxr_linenumber" name="236" href="#236">236</a> <strong class="jxr_keyword">final</strong> Socket sock = socket != <strong class="jxr_keyword">null</strong> ? socket : createSocket(context);
+<a class="jxr_linenumber" name="237" href="#237">237</a> <strong class="jxr_keyword">if</strong> (localAddress != <strong class="jxr_keyword">null</strong>) {
+<a class="jxr_linenumber" name="238" href="#238">238</a> sock.bind(localAddress);
+<a class="jxr_linenumber" name="239" href="#239">239</a> }
+<a class="jxr_linenumber" name="240" href="#240">240</a> <strong class="jxr_keyword">try</strong> {
+<a class="jxr_linenumber" name="241" href="#241">241</a> <strong class="jxr_keyword">if</strong> (connectTimeout > 0 && sock.getSoTimeout() == 0) {
+<a class="jxr_linenumber" name="242" href="#242">242</a> sock.setSoTimeout(connectTimeout);
+<a class="jxr_linenumber" name="243" href="#243">243</a> }
+<a class="jxr_linenumber" name="244" href="#244">244</a> sock.connect(remoteAddress, connectTimeout);
+<a class="jxr_linenumber" name="245" href="#245">245</a> } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> IOException ex) {
+<a class="jxr_linenumber" name="246" href="#246">246</a> <strong class="jxr_keyword">try</strong> {
+<a class="jxr_linenumber" name="247" href="#247">247</a> sock.close();
+<a class="jxr_linenumber" name="248" href="#248">248</a> } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> IOException ignore) {
+<a class="jxr_linenumber" name="249" href="#249">249</a> }
+<a class="jxr_linenumber" name="250" href="#250">250</a> <strong class="jxr_keyword">throw</strong> ex;
+<a class="jxr_linenumber" name="251" href="#251">251</a> }
+<a class="jxr_linenumber" name="252" href="#252">252</a> <em class="jxr_comment">// Setup SSL layering if necessary</em>
+<a class="jxr_linenumber" name="253" href="#253">253</a> <strong class="jxr_keyword">if</strong> (sock instanceof SSLSocket) {
+<a class="jxr_linenumber" name="254" href="#254">254</a> <strong class="jxr_keyword">final</strong> SSLSocket sslsock = (SSLSocket) sock;
+<a class="jxr_linenumber" name="255" href="#255">255</a> sslsock.startHandshake();
+<a class="jxr_linenumber" name="256" href="#256">256</a> verifyHostname(sslsock, host.getHostName());
+<a class="jxr_linenumber" name="257" href="#257">257</a> <strong class="jxr_keyword">return</strong> sock;
+<a class="jxr_linenumber" name="258" href="#258">258</a> } <strong class="jxr_keyword">else</strong> {
+<a class="jxr_linenumber" name="259" href="#259">259</a> <strong class="jxr_keyword">return</strong> createLayeredSocket(sock, host.getHostName(), remoteAddress.getPort(), context);
+<a class="jxr_linenumber" name="260" href="#260">260</a> }
+<a class="jxr_linenumber" name="261" href="#261">261</a> }
+<a class="jxr_linenumber" name="262" href="#262">262</a>
+<a class="jxr_linenumber" name="263" href="#263">263</a> <strong class="jxr_keyword">public</strong> Socket createLayeredSocket(
+<a class="jxr_linenumber" name="264" href="#264">264</a> <strong class="jxr_keyword">final</strong> Socket socket,
+<a class="jxr_linenumber" name="265" href="#265">265</a> <strong class="jxr_keyword">final</strong> String target,
+<a class="jxr_linenumber" name="266" href="#266">266</a> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> port,
+<a class="jxr_linenumber" name="267" href="#267">267</a> <strong class="jxr_keyword">final</strong> HttpContext context) <strong class="jxr_keyword">throws</strong> IOException {
+<a class="jxr_linenumber" name="268" href="#268">268</a> <strong class="jxr_keyword">final</strong> SSLSocket sslsock = (SSLSocket) <strong class="jxr_keyword">this</strong>.socketfactory.createSocket(
+<a class="jxr_linenumber" name="269" href="#269">269</a> socket,
+<a class="jxr_linenumber" name="270" href="#270">270</a> target,
+<a class="jxr_linenumber" name="271" href="#271">271</a> port,
+<a class="jxr_linenumber" name="272" href="#272">272</a> <strong class="jxr_keyword">true</strong>);
+<a class="jxr_linenumber" name="273" href="#273">273</a> <strong class="jxr_keyword">if</strong> (supportedProtocols != <strong class="jxr_keyword">null</strong>) {
+<a class="jxr_linenumber" name="274" href="#274">274</a> sslsock.setEnabledProtocols(supportedProtocols);
+<a class="jxr_linenumber" name="275" href="#275">275</a> } <strong class="jxr_keyword">else</strong> {
+<a class="jxr_linenumber" name="276" href="#276">276</a> <em class="jxr_comment">// If supported protocols are not explicitly set, remove all SSL protocol versions</em>
+<a class="jxr_linenumber" name="277" href="#277">277</a> <strong class="jxr_keyword">final</strong> String[] allProtocols = sslsock.getSupportedProtocols();
+<a class="jxr_linenumber" name="278" href="#278">278</a> <strong class="jxr_keyword">final</strong> List<String> enabledProtocols = <strong class="jxr_keyword">new</strong> ArrayList<String>(allProtocols.length);
+<a class="jxr_linenumber" name="279" href="#279">279</a> <strong class="jxr_keyword">for</strong> (String protocol: allProtocols) {
+<a class="jxr_linenumber" name="280" href="#280">280</a> <strong class="jxr_keyword">if</strong> (!protocol.startsWith(<span class="jxr_string">"SSL"</span>)) {
+<a class="jxr_linenumber" name="281" href="#281">281</a> enabledProtocols.add(protocol);
+<a class="jxr_linenumber" name="282" href="#282">282</a> }
+<a class="jxr_linenumber" name="283" href="#283">283</a> }
+<a class="jxr_linenumber" name="284" href="#284">284</a> sslsock.setEnabledProtocols(enabledProtocols.toArray(<strong class="jxr_keyword">new</strong> String[enabledProtocols.size()]));
+<a class="jxr_linenumber" name="285" href="#285">285</a> }
+<a class="jxr_linenumber" name="286" href="#286">286</a> <strong class="jxr_keyword">if</strong> (supportedCipherSuites != <strong class="jxr_keyword">null</strong>) {
+<a class="jxr_linenumber" name="287" href="#287">287</a> sslsock.setEnabledCipherSuites(supportedCipherSuites);
+<a class="jxr_linenumber" name="288" href="#288">288</a> }
+<a class="jxr_linenumber" name="289" href="#289">289</a> prepareSocket(sslsock);
+<a class="jxr_linenumber" name="290" href="#290">290</a> sslsock.startHandshake();
+<a class="jxr_linenumber" name="291" href="#291">291</a> verifyHostname(sslsock, target);
+<a class="jxr_linenumber" name="292" href="#292">292</a> <strong class="jxr_keyword">return</strong> sslsock;
<a class="jxr_linenumber" name="293" href="#293">293</a> }
<a class="jxr_linenumber" name="294" href="#294">294</a>
-<a class="jxr_linenumber" name="295" href="#295">295</a> }
+<a class="jxr_linenumber" name="295" href="#295">295</a> <a href="../../../../../org/apache/http/conn/ssl/X509HostnameVerifier.html">X509HostnameVerifier</a> getHostnameVerifier() {
+<a class="jxr_linenumber" name="296" href="#296">296</a> <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">this</strong>.hostnameVerifier;
+<a class="jxr_linenumber" name="297" href="#297">297</a> }
+<a class="jxr_linenumber" name="298" href="#298">298</a>
+<a class="jxr_linenumber" name="299" href="#299">299</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> verifyHostname(<strong class="jxr_keyword">final</strong> SSLSocket sslsock, <strong class="jxr_keyword">final</strong> String hostname) <strong class="jxr_keyword">throws</strong> IOException {
+<a class="jxr_linenumber" name="300" href="#300">300</a> <strong class="jxr_keyword">try</strong> {
+<a class="jxr_linenumber" name="301" href="#301">301</a> <strong class="jxr_keyword">this</strong>.hostnameVerifier.verify(hostname, sslsock);
+<a class="jxr_linenumber" name="302" href="#302">302</a> <em class="jxr_comment">// verifyHostName() didn't blowup - good!</em>
+<a class="jxr_linenumber" name="303" href="#303">303</a> } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> IOException iox) {
+<a class="jxr_linenumber" name="304" href="#304">304</a> <em class="jxr_comment">// close the socket before re-throwing the exception</em>
+<a class="jxr_linenumber" name="305" href="#305">305</a> <strong class="jxr_keyword">try</strong> { sslsock.close(); } <strong class="jxr_keyword">catch</strong> (<strong class="jxr_keyword">final</strong> Exception x) { <em class="jxr_comment">/*<em class="jxr_comment">ignore*/</em> }</em>
+<a class="jxr_linenumber" name="306" href="#306">306</a> <strong class="jxr_keyword">throw</strong> iox;
+<a class="jxr_linenumber" name="307" href="#307">307</a> }
+<a class="jxr_linenumber" name="308" href="#308">308</a> }
+<a class="jxr_linenumber" name="309" href="#309">309</a>
+<a class="jxr_linenumber" name="310" href="#310">310</a> }
</pre>
<hr/><div id="footer">This page was automatically generated by <a href="http://maven.apache.org/">Maven</a></div></body>
</html>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-frame.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-frame.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-frame.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-frame.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.conn.ssl</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.conn.ssl</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-summary.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-summary.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-summary.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/ssl/package-summary.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.conn.ssl</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.conn.ssl</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-frame.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-frame.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-frame.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-frame.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.conn.util</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.conn.util</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-summary.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-summary.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-summary.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/conn/util/package-summary.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.conn.util</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.conn.util</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-frame.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-frame.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-frame.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-frame.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.cookie</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.cookie</title>
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-summary.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-summary.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-summary.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/package-summary.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.cookie</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.cookie</title>
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-frame.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-frame.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-frame.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-frame.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.cookie.params</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.cookie.params</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-summary.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-summary.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-summary.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/cookie/params/package-summary.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.cookie.params</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.cookie.params</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/NTLMEngineImpl.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/NTLMEngineImpl.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/NTLMEngineImpl.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/NTLMEngineImpl.html Thu Nov 6 14:29:37 2014
@@ -1125,7 +1125,7 @@
<a class="jxr_linenumber" name="1115" href="#1115">1115</a>
<a class="jxr_linenumber" name="1116" href="#1116">1116</a> <strong class="jxr_keyword">if</strong> ((flags & FLAG_REQUEST_UNICODE_ENCODING) == 0) {
<a class="jxr_linenumber" name="1117" href="#1117">1117</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> <a href="../../../../../org/apache/http/impl/auth/NTLMEngineException.html">NTLMEngineException</a>(
-<a class="jxr_linenumber" name="1118" href="#1118">1118</a> <span class="jxr_string">"NTLM type 2 message has flags that make no sense: "</span>
+<a class="jxr_linenumber" name="1118" href="#1118">1118</a> <span class="jxr_string">"NTLM type 2 message indicates no support for Unicode. Flags are: "</span>
<a class="jxr_linenumber" name="1119" href="#1119">1119</a> + Integer.toString(flags));
<a class="jxr_linenumber" name="1120" href="#1120">1120</a> }
<a class="jxr_linenumber" name="1121" href="#1121">1121</a>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-frame.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-frame.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-frame.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-frame.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.impl.auth</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.impl.auth</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-summary.html
URL: http://svn.apache.org/viewvc/httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-summary.html?rev=1637120&r1=1637119&r2=1637120&view=diff
==============================================================================
--- httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-summary.html (original)
+++ httpcomponents/site/httpcomponents-client-4.3.x/httpclient/xref/org/apache/http/impl/auth/package-summary.html Thu Nov 6 14:29:37 2014
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
- <title>Apache HttpClient 4.3.5 Reference Package org.apache.http.impl.auth</title>
+ <title>Apache HttpClient 4.3.6 Reference Package org.apache.http.impl.auth</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>