pack-priv final Class ConscryptServerSocket

Overrides java.net.ServerSocket.accept.

Doc from java.net.ServerSocket.accept.

Listens for a connection to be made to this socket and accepts it. The method blocks until a connection is made.

This method is interruptible in the following circumstances:

1. The socket is associated with a ServerSocketChannel. In that case, interrupting a thread accepting a connection will close the underlying channel and cause this method to throw java.nio.channels.ClosedByInterruptException with the interrupt status set.
2. The socket uses the system-default socket implementation and a virtual thread is accepting a connection. In that case, interrupting the virtual thread will cause it to wakeup and close the socket. This method will then throw SocketException with the interrupt status set.

A new Socket s is created and, if there is a security manager, the security manager's checkAccept method is called with s.getInetAddress().getHostAddress() and s.getPort() as its arguments to ensure the operation is allowed. This could result in a SecurityException.

Returns:Socket

the new Socket

Annotations

@Override

Exceptions

IOException:

if an I/O error occurs when waiting for a connection.

Implements abstract javax.net.ssl.SSLServerSocket.getEnabledCipherSuites.

Doc from javax.net.ssl.SSLServerSocket.getEnabledCipherSuites.

Returns the list of cipher suites which are currently enabled for use by newly accepted connections.

If this list has not been explicitly modified, a system-provided default guarantees a minimum quality of service in all enabled cipher suites.

Note that even if a suite is enabled, it may never be used. This can occur if the peer does not support it, or its use is restricted, or the requisite certificates (and private keys) for the suite are not available, or an anonymous suite is enabled but authentication is required.

The returned array includes cipher suites from the list of standard cipher suite names in the JSSE Cipher Suite Names section of the Java Security Standard Algorithm Names Specification, and may also include other cipher suites that the provider supports.

Returns:String[]

an array of cipher suites enabled

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getEnabledProtocols.

The names of the protocols' versions that in use on this SSL connection.

Returns:String[]

an array of protocols names

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getEnableSessionCreation.

Doc from javax.net.ssl.SSLServerSocket.getEnableSessionCreation.

Returns true if new SSL sessions may be established by the sockets which are created from this server socket.

Returns:boolean

true indicates that sessions may be created; this is the default. false indicates that an existing session must be resumed

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getNeedClientAuth.

Doc from javax.net.ssl.SSLServerSocket.getNeedClientAuth.

Returns true if client authentication will be required on newly accepted server-mode SSLSockets.

The initial inherited setting may be overridden by calling SSLSocket#setNeedClientAuth(boolean) or SSLSocket#setWantClientAuth(boolean).

Returns:boolean

true if client authentication is required, or false if no client authentication is desired.

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getSupportedCipherSuites.

Doc from javax.net.ssl.SSLServerSocket.getSupportedCipherSuites.

Returns the names of the cipher suites which could be enabled for use on an SSL connection.

Normally, only a subset of these will actually be enabled by default, since this list may include cipher suites which do not meet quality of service requirements for those defaults. Such cipher suites are useful in specialized applications.

The returned array includes cipher suites from the list of standard cipher suite names in the JSSE Cipher Suite Names section of the Java Security Standard Algorithm Names Specification, and may also include other cipher suites that the provider supports.

Returns:String[]

an array of cipher suite names

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getSupportedProtocols.

The names of the protocols' versions that may be used on this SSL connection.

Returns:String[]

an array of protocols names

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getUseClientMode.

Doc from javax.net.ssl.SSLServerSocket.getUseClientMode.

Returns true if accepted connections will be in SSL client mode.

Returns:boolean

true if the connection should use SSL client mode.

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.getWantClientAuth.

Doc from javax.net.ssl.SSLServerSocket.getWantClientAuth.

Returns true if client authentication will be requested on newly accepted server-mode connections.

The initial inherited setting may be overridden by calling SSLSocket#setNeedClientAuth(boolean) or SSLSocket#setWantClientAuth(boolean).

Returns:boolean

true if client authentication is requested, or false if no client authentication is desired.

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.setEnabledCipherSuites.

This method enables the cipher suites listed by getSupportedCipherSuites().

Parameters

suites:String[]

the names of all the cipher suites to enable

Annotations

@Override

Exceptions

IllegalArgumentException:

when one or more of the ciphers in array suites are not supported, or when the array is null.

Implements abstract javax.net.ssl.SSLServerSocket.setEnabledProtocols.

This method enables the protocols' versions listed by getSupportedProtocols().

Parameters

protocols:String[]

names of all the protocols to enable.

Annotations

@Override

Exceptions

IllegalArgumentException:

when one or more of the names in the array are not supported, or when the array is null.

Implements abstract javax.net.ssl.SSLServerSocket.setEnableSessionCreation.

Doc from javax.net.ssl.SSLServerSocket.setEnableSessionCreation.

Controls whether new SSL sessions may be established by the sockets which are created from this server socket.

SSLSockets returned from accept() inherit this setting.

Parameters

flag:boolean

true indicates that sessions may be created; this is the default. false indicates that an existing session must be resumed.

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.setNeedClientAuth.

Doc from javax.net.ssl.SSLServerSocket.setNeedClientAuth.

Controls whether accepted server-mode SSLSockets will be initially configured to require client authentication.

A socket's client authentication setting is one of the following:

• client authentication required
• client authentication requested
• no client authentication desired

Unlike setWantClientAuth(boolean), if the accepted socket's option is set and the client chooses not to provide authentication information about itself, the negotiations will stop and the connection will be dropped.

Calling this method overrides any previous setting made by this method or setWantClientAuth(boolean).

The initial inherited setting may be overridden by calling SSLSocket#setNeedClientAuth(boolean) or SSLSocket#setWantClientAuth(boolean).

Parameters

need:boolean

set to true if client authentication is required, or false if no client authentication is desired.

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.setUseClientMode.

Doc from javax.net.ssl.SSLServerSocket.setUseClientMode.

Controls whether accepted connections are in the (default) SSL server mode, or the SSL client mode.

Servers normally authenticate themselves, and clients are not required to do so.

In rare cases, TCP servers need to act in the SSL client mode on newly accepted connections. For example, FTP clients acquire server sockets and listen there for reverse connections from the server. An FTP client would use an SSLServerSocket in "client" mode to accept the reverse connection while the FTP server uses an SSLSocket with "client" mode disabled to initiate the connection. During the resulting handshake, existing SSL sessions may be reused.

SSLSockets returned from accept() inherit this setting.

Parameters

mode:boolean

true if newly accepted connections should use SSL client mode.

Annotations

@Override

Implements abstract javax.net.ssl.SSLServerSocket.setWantClientAuth.

Doc from javax.net.ssl.SSLServerSocket.setWantClientAuth.

Controls whether accepted server-mode SSLSockets will be initially configured to request client authentication.

A socket's client authentication setting is one of the following:

• client authentication required
• client authentication requested
• no client authentication desired

Unlike setNeedClientAuth(boolean), if the accepted socket's option is set and the client chooses not to provide authentication information about itself, the negotiations will continue.

Calling this method overrides any previous setting made by this method or setNeedClientAuth(boolean).

The initial inherited setting may be overridden by calling SSLSocket#setNeedClientAuth(boolean) or SSLSocket#setWantClientAuth(boolean).

Parameters

want:boolean

set to true if client authentication is requested, or false if no client authentication is desired.

Annotations

@Override