| Modifier and Type | Field and Description |
|---|---|
| private ChannelBinding | |
| private boolean | |
| private boolean | |
| pack-priv static final Debug | |
| private boolean | |
| private byte[] | |
| private final SpNegoMechFactory | |
| private final boolean | |
| private boolean | |
| private Oid | |
| private int | |
| private GSSContext | |
| private boolean | |
| private final SpNegoCredElement | |
| private GSSNameSpi | |
| private GSSNameSpi | |
| private boolean | |
| private boolean | |
| private int | |
| private static final int | |
| private static final int | |
| private static final int | |
| private static final int |
| Access | Constructor and Description |
|---|---|
| public | SpNegoContext(SpNegoMechFactory factory, GSSNameSpi peerName, GSSCredentialSpi myCred, int lifetime)
Constructor for SpNegoContext to be called on the context initiator's side. |
| public | SpNegoContext(SpNegoMechFactory factory, GSSCredentialSpi myCred)
Constructor for SpNegoContext to be called on the context acceptor's side. |
| public | SpNegoContext(SpNegoMechFactory factory, byte[] interProcessToken)
Constructor for SpNegoContext to import a previously exported context. |
| Modifier and Type | Method and Description |
|---|---|
| public final byte[] | Returns: any token required to be sent to the peer It is responsibility of the caller to send the token to its peer for processing.contains the token received from the peer. is, int mechTokenSize)Implements sun.
Deprecated
since 11.
Acceptor's context establishment call. |
| public final void | dispose()
Implements sun. Releases context resources and terminates the context between 2 peer. |
| public final byte[] | export()
Implements sun. Produces a token representing this context. |
| public final boolean | |
| private Oid[] | |
| pack-priv final ChannelBinding | |
| public final boolean | getConfState()
Implements sun. Is confidentiality available? |
| private BitArray | |
| public final boolean | getCredDelegState()
Implements sun. Is credential delegation enabled? |
| public final GSSCredentialSpi | Returns: GSSCredentialSpi object for the delegated credentialImplements sun. Returns the delegated credential for the context. |
| public final boolean | getDelegPolicyState()
Implements sun. Is deleg policy respected? |
| private byte[] | |
| public final boolean | getIntegState()
Implements sun. Is integrity available? |
| public final int | getLifetime()
Implements sun. The lifetime remaining for this context. |
| public final Oid | Returns: the Oid of this contextImplements sun. Returns the mechanism oid. |
| public final byte[] | getMIC(byte[] inMsg, int offset, int len, MessageProp msgProp)
Implements sun.
|
| public final void | getMIC(InputStream is, OutputStream os, MessageProp msgProp)
Implements sun.
Deprecated
since 11.
Applies per-message integrity services. |
| public final boolean | getMutualAuthState()
Implements sun. Is mutual authentication enabled? |
| public final Oid | |
| public final Provider | |
| public final boolean | getReplayDetState()
Implements sun. Is replay detection enabled on the GSS wrap and MIC tokens? |
| public final boolean | getSequenceDetState()
Implements sun. Is sequence checking enabled on the GSS Wrap and MIC tokens? |
| public final GSSNameSpi | |
| public final GSSNameSpi | |
| public final int | getWrapSizeLimit(int qop, boolean confReq, int maxTokSize)
Implements sun. Queries the context for largest data size to accommodate the specified protection and for the token to remain less than maxTokSize. |
| private byte[] | GSS_acceptSecContext(byte[] token)
call gss_accept_sec_context for the corresponding underlying mechanism |
| private byte[] | GSS_initSecContext(byte[] token)
call gss_init_sec_context for the corresponding underlying mechanism |
| public final byte[] | Returns: any token required to be sent to the peer It is responsibility of the caller to send the token to its peer for processing.contains the token received from the peer. On the
first call it will be ignored. is, int mechTokenSize)Implements sun.
Deprecated
since 11.
Initiator context establishment call. |
| public Object | inquireSecContext(String type)
Implements sun. Retrieve attribute of the context for |
| public final boolean | |
| public final boolean | Returns: boolean indicating if this is initiator (true) or target (false)Implements sun. Tests if this is the initiator side of the context. |
| public final boolean | |
| public final boolean | Returns: boolean indicating if per-message methods can be called.Implements sun. Tests if the context can be used for per-message service. |
| public final boolean | |
| private static Oid | negotiate_mech_type(Oid[] supported_mechSet, Oid[] mechSet)
This routine compares the received mechset to the mechset that this server can support. |
| private static String | |
| public final void | |
| public final void | requestConf(boolean value)
Implements sun. Requests that confidentiality be available. |
| public final void | requestCredDeleg(boolean value)
Implements sun. Requests that credential delegation be done during context establishment. |
| public final void | requestDelegPolicy(boolean value)
Implements sun. Requests that deleg policy be respected. |
| public final void | requestInteg(boolean value)
Implements sun. Requests that integrity be available. |
| public void | requestLifetime(int lifetime)
Implements sun. Requests the desired lifetime. |
| public final void | requestMutualAuth(boolean value)
Implements sun. Requests that mutual authentication be done during context establishment. |
| public final void | requestReplayDet(boolean value)
Implements sun. Requests that replay detection be done on the GSS wrap and MIC tokens. |
| public final void | requestSequenceDet(boolean value)
Implements sun. Requests that sequence checking be done on the GSS wrap and MIC tokens. |
| public final void | setChannelBinding(ChannelBinding channelBinding)
Implements sun. Sets the channel bindings to be used during context establishment. |
| private void | |
| public final byte[] | unwrap(byte[] inBuf, int offset, int len, MessageProp msgProp)
Implements sun. For apps that want simplicity and don't care about buffer copies. |
| public final void | unwrap(InputStream is, OutputStream os, MessageProp msgProp)
Implements sun.
Deprecated
since 11.
Retrieves the message token previously encapsulated in the wrap call. |
| private boolean | |
| public final void | verifyMIC(byte[] inTok, int tokOffset, int tokLen, byte[] inMsg, int msgOffset, int msgLen, MessageProp msgProp)
Implements sun.
|
| public final void | verifyMIC(InputStream is, InputStream msgStr, MessageProp msgProp)
Implements sun.
Deprecated
since 11.
Checks the integrity of the supplied tokens. |
| public final byte[] | wrap(byte[] inBuf, int offset, int len, MessageProp msgProp)
Implements sun. For apps that want simplicity and don't care about buffer copies. |
| public final void | wrap(InputStream is, OutputStream os, MessageProp msgProp)
Implements sun.
Deprecated
since 11.
Provides per-message token encapsulation. |
| channelBinding | back to summary |
|---|---|
| private ChannelBinding channelBinding | |
| confState | back to summary |
|---|---|
| private boolean confState | |
| credDelegState | back to summary |
|---|---|
| private boolean credDelegState | |
| DEBUG | back to summary |
|---|---|
| pack-priv static final Debug DEBUG | |
| delegPolicyState | back to summary |
|---|---|
| private boolean delegPolicyState | |
| DER_mechTypes | back to summary |
|---|---|
| private byte[] DER_mechTypes | |
| factory | back to summary |
|---|---|
| private final SpNegoMechFactory factory | |
| initiator | back to summary |
|---|---|
| private final boolean initiator | |
| integState | back to summary |
|---|---|
| private boolean integState | |
| internal_mech | back to summary |
|---|---|
| private Oid internal_mech | |
| lifetime | back to summary |
|---|---|
| private int lifetime | |
| mechContext | back to summary |
|---|---|
| private GSSContext mechContext | |
| mutualAuthState | back to summary |
|---|---|
| private boolean mutualAuthState | |
| myCred | back to summary |
|---|---|
| private final SpNegoCredElement myCred | |
| myName | back to summary |
|---|---|
| private GSSNameSpi myName | |
| peerName | back to summary |
|---|---|
| private GSSNameSpi peerName | |
| replayDetState | back to summary |
|---|---|
| private boolean replayDetState | |
| sequenceDetState | back to summary |
|---|---|
| private boolean sequenceDetState | |
| state | back to summary |
|---|---|
| private int state | |
| STATE_DELETED | back to summary |
|---|---|
| private static final int STATE_DELETED | |
| STATE_DONE | back to summary |
|---|---|
| private static final int STATE_DONE | |
| STATE_IN_PROCESS | back to summary |
|---|---|
| private static final int STATE_IN_PROCESS | |
| STATE_NEW | back to summary |
|---|---|
| private static final int STATE_NEW | |
| SpNegoContext | back to summary |
|---|---|
| public SpNegoContext(SpNegoMechFactory factory, GSSNameSpi peerName, GSSCredentialSpi myCred, int lifetime) throws GSSException Constructor for SpNegoContext to be called on the context initiator's side. | |
| SpNegoContext | back to summary |
|---|---|
| public SpNegoContext(SpNegoMechFactory factory, GSSCredentialSpi myCred) throws GSSException Constructor for SpNegoContext to be called on the context acceptor's side. | |
| SpNegoContext | back to summary |
|---|---|
| public SpNegoContext(SpNegoMechFactory factory, byte[] interProcessToken) throws GSSException Constructor for SpNegoContext to import a previously exported context. | |
| acceptSecContext | back to summary |
|---|---|
| public final byte[] acceptSecContext(InputStream is, int mechTokenSize) throws GSSException Implements sun. Deprecated since 11. Acceptor's context establishment call. This method may be required to be called several times. A CONTINUE_NEEDED return call indicates that more calls are needed after the next token is received from the peer.
| |
| dispose | back to summary |
|---|---|
| public final void dispose() throws GSSException Implements sun. Doc from sun. Releases context resources and terminates the context between 2 peer.
| |
| export | back to summary |
|---|---|
| public final byte[] export() throws GSSException Implements sun. Doc from sun. Produces a token representing this context. After this call the context will no longer be usable until an import is performed on the returned token.
| |
| getAnonymityState | back to summary |
|---|---|
| public final boolean getAnonymityState() Implements sun. | |
| getAvailableMechs | back to summary |
|---|---|
| private Oid[] getAvailableMechs() obtain the available mechanisms | |
| getChannelBinding | back to summary |
|---|---|
| pack-priv final ChannelBinding getChannelBinding() | |
| getConfState | back to summary |
|---|---|
| public final boolean getConfState() Implements sun. Is confidentiality available? | |
| getContextFlags | back to summary |
|---|---|
| private BitArray getContextFlags() get the context flags | |
| getCredDelegState | back to summary |
|---|---|
| public final boolean getCredDelegState() Implements sun. Is credential delegation enabled? | |
| getDelegCred | back to summary |
|---|---|
| public final GSSCredentialSpi getDelegCred() throws GSSException Implements sun. Returns the delegated credential for the context. This is an optional feature of contexts which not all mechanisms will support. A context can be requested to support credential delegation by using the CRED_DELEG. This is only valid on the acceptor side of the context.
| |
| getDelegPolicyState | back to summary |
|---|---|
| public final boolean getDelegPolicyState() Implements sun. Is deleg policy respected? | |
| getEncodedMechs | back to summary |
|---|---|
| private byte[] getEncodedMechs(Oid[] mechSet) throws IOException, GSSException get the DER encoded MechList | |
| getIntegState | back to summary |
|---|---|
| public final boolean getIntegState() Implements sun. Is integrity available? | |
| getLifetime | back to summary |
|---|---|
| public final int getLifetime() Implements sun. The lifetime remaining for this context. | |
| getMech | back to summary |
|---|---|
| public final Oid getMech() Implements sun. Returns the mechanism oid.
| |
| getMIC | back to summary |
|---|---|
| public final byte[] getMIC(byte[] inMsg, int offset, int len, MessageProp msgProp) throws GSSException Implements sun. | |
| getMIC | back to summary |
|---|---|
| public final void getMIC(InputStream is, OutputStream os, MessageProp msgProp) throws GSSException Implements sun. Doc from sun. Deprecated since 11. Applies per-message integrity services.
| |
| getMutualAuthState | back to summary |
|---|---|
| public final boolean getMutualAuthState() Implements sun. Is mutual authentication enabled? Since this is from the client's perspective, it essentially meas that the server is being authenticated. | |
| getNegotiatedMech | back to summary |
|---|---|
| public final Oid getNegotiatedMech() | |
| getProvider | back to summary |
|---|---|
| public final Provider getProvider() Implements sun. | |
| getReplayDetState | back to summary |
|---|---|
| public final boolean getReplayDetState() Implements sun. Is replay detection enabled on the GSS wrap and MIC tokens? We enable replay detection if sequence checking is enabled. | |
| getSequenceDetState | back to summary |
|---|---|
| public final boolean getSequenceDetState() Implements sun. Is sequence checking enabled on the GSS Wrap and MIC tokens? We enable sequence checking if replay detection is enabled. | |
| getSrcName | back to summary |
|---|---|
| public final GSSNameSpi getSrcName() throws GSSException Implements sun. | |
| getTargName | back to summary |
|---|---|
| public final GSSNameSpi getTargName() throws GSSException Implements sun. | |
| getWrapSizeLimit | back to summary |
|---|---|
| public final int getWrapSizeLimit(int qop, boolean confReq, int maxTokSize) throws GSSException Implements sun. Doc from sun. Queries the context for largest data size to accommodate the specified protection and for the token to remain less than maxTokSize.
| |
| GSS_acceptSecContext | back to summary |
|---|---|
| private byte[] GSS_acceptSecContext(byte[] token) throws GSSException call gss_accept_sec_context for the corresponding underlying mechanism | |
| GSS_initSecContext | back to summary |
|---|---|
| private byte[] GSS_initSecContext(byte[] token) throws GSSException call gss_init_sec_context for the corresponding underlying mechanism | |
| initSecContext | back to summary |
|---|---|
| public final byte[] initSecContext(InputStream is, int mechTokenSize) throws GSSException Implements sun. Deprecated since 11. Initiator context establishment call. This method may be required to be called several times. A CONTINUE_NEEDED return call indicates that more calls are needed after the next token is received from the peer.
| |
| inquireSecContext | back to summary |
|---|---|
| public Object inquireSecContext(String type) throws GSSException Implements sun. Retrieve attribute of the context for
| |
| isEstablished | back to summary |
|---|---|
| public final boolean isEstablished() Implements sun. | |
| isInitiator | back to summary |
|---|---|
| public final boolean isInitiator() Implements sun. Tests if this is the initiator side of the context.
| |
| isMechContextEstablished | back to summary |
|---|---|
| public final boolean isMechContextEstablished() | |
| isProtReady | back to summary |
|---|---|
| public final boolean isProtReady() Implements sun. Tests if the context can be used for per-message service. Context may allow the calls to the per-message service functions before being fully established.
| |
| isTransferable | back to summary |
|---|---|
| public final boolean isTransferable() throws GSSException Implements sun. | |
| negotiate_mech_type | back to summary |
|---|---|
| private static Oid negotiate_mech_type(Oid[] supported_mechSet, Oid[] mechSet) This routine compares the received mechset to the mechset that this server can support. It looks sequentially through the mechset and the first one that matches what the server can support is chosen as the negotiated mechanism. If one is found, negResult is set to ACCEPT_COMPLETE, otherwise we return NULL and negResult is set to REJECT. | |
| printState | back to summary |
|---|---|
| private static String printState(int state) | |
| requestAnonymity | back to summary |
|---|---|
| public final void requestAnonymity(boolean value) throws GSSException Implements sun. | |
| requestConf | back to summary |
|---|---|
| public final void requestConf(boolean value) throws GSSException Implements sun. Requests that confidentiality be available. | |
| requestCredDeleg | back to summary |
|---|---|
| public final void requestCredDeleg(boolean value) throws GSSException Implements sun. Requests that credential delegation be done during context establishment. | |
| requestDelegPolicy | back to summary |
|---|---|
| public final void requestDelegPolicy(boolean value) throws GSSException Implements sun. Requests that deleg policy be respected. | |
| requestInteg | back to summary |
|---|---|
| public final void requestInteg(boolean value) throws GSSException Implements sun. Requests that integrity be available. | |
| requestLifetime | back to summary |
|---|---|
| public void requestLifetime(int lifetime) throws GSSException Implements sun. Requests the desired lifetime. Can only be used on the context initiator's side. | |
| requestMutualAuth | back to summary |
|---|---|
| public final void requestMutualAuth(boolean value) throws GSSException Implements sun. Requests that mutual authentication be done during context establishment. Since this is fromm the client's perspective, it essentially requests that the server be authenticated. | |
| requestReplayDet | back to summary |
|---|---|
| public final void requestReplayDet(boolean value) throws GSSException Implements sun. Requests that replay detection be done on the GSS wrap and MIC tokens. | |
| requestSequenceDet | back to summary |
|---|---|
| public final void requestSequenceDet(boolean value) throws GSSException Implements sun. Requests that sequence checking be done on the GSS wrap and MIC tokens. | |
| setChannelBinding | back to summary |
|---|---|
| public final void setChannelBinding(ChannelBinding channelBinding) throws GSSException Implements sun. Sets the channel bindings to be used during context establishment. | |
| setContextFlags | back to summary |
|---|---|
| private void setContextFlags() | |
| unwrap | back to summary |
|---|---|
| public final byte[] unwrap(byte[] inBuf, int offset, int len, MessageProp msgProp) throws GSSException Implements sun. Doc from sun. For apps that want simplicity and don't care about buffer copies. | |
| unwrap | back to summary |
|---|---|
| public final void unwrap(InputStream is, OutputStream os, MessageProp msgProp) throws GSSException Implements sun. Doc from sun. Deprecated since 11. Retrieves the message token previously encapsulated in the wrap call.
| |
| verifyMechListMIC | back to summary |
|---|---|
| private boolean verifyMechListMIC(byte[] mechTypes, byte[] token) throws GSSException verify MIC on MechList | |
| verifyMIC | back to summary |
|---|---|
| public final void verifyMIC(byte[] inTok, int tokOffset, int tokLen, byte[] inMsg, int msgOffset, int msgLen, MessageProp msgProp) throws GSSException Implements sun. | |
| verifyMIC | back to summary |
|---|---|
| public final void verifyMIC(InputStream is, InputStream msgStr, MessageProp msgProp) throws GSSException Implements sun. Doc from sun. Deprecated since 11. Checks the integrity of the supplied tokens. This token was previously generated by getMIC.
| |
| wrap | back to summary |
|---|---|
| public final byte[] wrap(byte[] inBuf, int offset, int len, MessageProp msgProp) throws GSSException Implements sun. Doc from sun. For apps that want simplicity and don't care about buffer copies. | |
| wrap | back to summary |
|---|---|
| public final void wrap(InputStream is, OutputStream os, MessageProp msgProp) throws GSSException Implements sun. Doc from sun. Deprecated since 11. Provides per-message token encapsulation.
| |