Calculates the minimum bytes required in the encrypted output buffer for the given number of plaintext source bytes.

Decodes the given list of protocols into Strings.

Parameters

protocols:byte[]

the encoded protocol list

Returns:String[]

the decoded protocols or EmptyArray#BYTE if protocols is empty.

Exceptions

NullPointerException:

if protocols is null.

Encodes a list of protocols into the wire-format (length-prefixed 8-bit strings). Requires that all strings be encoded with US-ASCII.

Parameters

protocols:String[]

the list of protocols to be encoded

Returns:byte[]

the encoded form of the protocol list.

Exceptions

IllegalArgumentException:

if protocols is null, or if any element is null or an empty string.

Similar to getServerKeyType, but returns value given TLS ClientCertificateType byte values from a CertificateRequest message for use with X509KeyManager.chooseClientAlias or X509ExtendedKeyManager.chooseEngineClientAlias.

Visible for testing.

Return how much bytes can be read out of the encrypted data. Be aware that this method will not increase the readerIndex of the given ByteBuffer.

Parameters

buffers:ByteBuffer[]

The ByteBuffers to read from. Be aware that they must have at least org.conscrypt.NativeConstants#SSL3_RT_HEADER_LENGTH bytes to read, otherwise it will throw an IllegalArgumentException.

Returns:int

length The length of the encrypted packet that is included in the buffer. This will return -1 if the given ByteBuffer is not encrypted at all.

Exceptions

IllegalArgumentException:

Is thrown if the given ByteBuffer has not at least org.conscrypt.NativeConstants#SSL3_RT_HEADER_LENGTH bytes to read.

Returns key type constant suitable for calling X509KeyManager.chooseServerAlias or X509ExtendedKeyManager.chooseEngineServerAlias. Returns null for key exchanges that do not use X.509 for server authentication.

Gets the supported key types for client certificates based on the ClientCertificateType values provided by the server.

Parameters

clientCertificateTypes:byte[]

ClientCertificateType values provided by the server. See https://www.ietf.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-2.

signatureAlgs:int[]

SignatureScheme values provided by the server. See https://www.ietf.org/assignments/tls-parameters/tls-parameters.xml#tls-signaturescheme

Returns:Set<String>

supported key types that can be used in X509KeyManager.chooseClientAlias and X509ExtendedKeyManager.chooseEngineClientAlias. If the inputs imply a preference order, the returned set will have an iteration order that respects that preference order, otherwise it will be in an arbitrary order. Visible for testing.

Converts the peer certificates into a cert chain.

Wraps the given exception if it's not already a SSLException.

Wraps the given exception if it's not already a SSLHandshakeException.