content: /*
   * Licensed to the Apache Software Foundation (ASF) under one
   * or more contributor license agreements.  See the NOTICE file
   * distributed with this work for additional information
   * regarding copyright ownership.  The ASF licenses this file
   * to you under the Apache License, Version 2.0 (the
   * "License"); you may not use this file except in compliance
   * with the License.  You may obtain a copy of the License at
   *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package org.apache.ambari.server.security;
  
  import java.io.IOException;
  import java.net.InetAddress;
  import java.net.Socket;
  import java.security.SecureRandom;
  import java.security.cert.CertificateException;
  import java.security.cert.X509Certificate;
  
  import javax.net.ssl.SSLContext;
  import javax.net.ssl.SSLEngine;
  import javax.net.ssl.SSLSocketFactory;
  import javax.net.ssl.TrustManager;
  import javax.net.ssl.X509ExtendedTrustManager;
  import javax.net.ssl.X509TrustManager;
  
  /**
   * InternalSSLSocketFactory is an abstract class implementing a SSLSocketFactory.
   * <p>
   * Implementers of this class need to specific the SSLContext protocol and whether the server's SSL
   * certificates should be trusted or validated.
   */
  public class InternalSSLSocketFactory extends SSLSocketFactory {
    private SSLSocketFactory socketFactory;
  
    InternalSSLSocketFactory(String protocol, boolean trusting) {
      try {
        SSLContext ctx = SSLContext.getInstance(protocol);
  
        // If trusting, install our own TrustManager to accept certificates without validating the
        // trust chain; else, use the default TrustManager, which validates the certificate's trust chain.
        TrustManager[] trustManagers = (trusting)
            ? new TrustManager[]{new LenientTrustManager()}
            : null;
  
        ctx.init(null, trustManagers, new SecureRandom());
        socketFactory = ctx.getSocketFactory();
      } catch (Exception ex) {
        ex.printStackTrace(System.err);  /* handle exception */
      }
    }
  
    @Override
    public String[] getDefaultCipherSuites() {
      return socketFactory.getDefaultCipherSuites();
    }
  
    @Override
    public String[] getSupportedCipherSuites() {
      return socketFactory.getSupportedCipherSuites();
    }
  
    @Override
    public Socket createSocket(Socket socket, String string, int i, boolean bln) throws IOException {
      return socketFactory.createSocket(socket, string, i, bln);
    }
  
    @Override
    public Socket createSocket(String string, int i) throws IOException {
      return socketFactory.createSocket(string, i);
    }
  
    @Override
    public Socket createSocket(String string, int i, InetAddress ia, int i1) throws IOException {
      return socketFactory.createSocket(string, i, ia, i1);
    }
  
    @Override
    public Socket createSocket(InetAddress ia, int i) throws IOException {
      return socketFactory.createSocket(ia, i);
    }
  
    @Override
    public Socket createSocket(InetAddress ia, int i, InetAddress ia1, int i1) throws IOException {
      return socketFactory.createSocket(ia, i, ia1, i1);
    }
  
  
    /**
     * LenientTrustManager is a TrustManager that accepts all certificates without validating the
     * chain of trust or hostname.
     */
    public static class LenientTrustManager extends X509ExtendedTrustManager implements X509TrustManager {
      @Override
      public void checkClientTrusted(X509Certificate[] xcs, String string) throws CertificateException {
        // do nothing
      }
  
      @Override
      public void checkServerTrusted(X509Certificate[] xcs, String string) throws CertificateException {
        // do nothing
      }
  
      @Override
      public X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[0];
      }
  
      @Override
      public void checkClientTrusted(X509Certificate[] x509Certificates, String s, Socket socket) throws CertificateException {
        // do nothing
      }
  
      @Override
      public void checkServerTrusted(X509Certificate[] x509Certificates, String s, Socket socket) throws CertificateException {
        // do nothing
      }
  
      @Override
      public void checkClientTrusted(X509Certificate[] x509Certificates, String s, SSLEngine sslEngine) throws CertificateException {
        // do nothing
      }
  
      @Override
      public void checkServerTrusted(X509Certificate[] x509Certificates, String s, SSLEngine sslEngine) throws CertificateException {
        // do nothing
      }
    }
  }