mirror of https://github.com/grpc/grpc-java.git
Support setting ALPN for Android older than 5.0, OkHttp(2.3+) implementation only support such function for Android 5.0+.
Manually tested with the test App: https://github.com/madongfly/grpc-android-test. Fixes #520
This commit is contained in:
parent
58a142a68c
commit
25da64937d
|
|
@ -33,8 +33,7 @@ package com.squareup.okhttp;
|
|||
|
||||
import com.google.common.base.Preconditions;
|
||||
|
||||
import com.squareup.okhttp.internal.Platform;
|
||||
import com.squareup.okhttp.internal.SelectedProtocolQuerier;
|
||||
import com.squareup.okhttp.internal.OkHttpProtocolNegotiator;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.net.Socket;
|
||||
|
|
@ -68,31 +67,12 @@ public final class OkHttpTlsUpgrader {
|
|||
SSLSocket sslSocket = (SSLSocket) sslSocketFactory.createSocket(
|
||||
socket, host, port, true /* auto close */);
|
||||
spec.apply(sslSocket, false);
|
||||
Platform platform = Platform.get();
|
||||
if (spec.supportsTlsExtensions()) {
|
||||
platform.configureTlsExtensions(sslSocket, host, TLS_PROTOCOLS);
|
||||
String negotiatedProtocol =
|
||||
OkHttpProtocolNegotiator.negotiate(sslSocket, host, TLS_PROTOCOLS);
|
||||
Preconditions.checkState(SUPPORTED_HTTP2_PROTOCOLS.contains(negotiatedProtocol),
|
||||
"negotiated protocol %s is unsupported", negotiatedProtocol);
|
||||
}
|
||||
|
||||
// It's possible that the user provided SSLSocketFactory has already done the handshake
|
||||
// when creates the SSLSocket.
|
||||
String negotiatedProtocol = SelectedProtocolQuerier.getSelectedProtocol(sslSocket);
|
||||
if (negotiatedProtocol == null) {
|
||||
try {
|
||||
// Force handshake.
|
||||
sslSocket.startHandshake();
|
||||
|
||||
negotiatedProtocol = SelectedProtocolQuerier.getSelectedProtocol(sslSocket);
|
||||
if (negotiatedProtocol == null) {
|
||||
throw new RuntimeException("protocol negotiation failed");
|
||||
}
|
||||
} finally {
|
||||
platform.afterHandshake(sslSocket);
|
||||
}
|
||||
}
|
||||
|
||||
Preconditions.checkState(SUPPORTED_HTTP2_PROTOCOLS.contains(negotiatedProtocol),
|
||||
"negotiated protocol %s is unsupported", negotiatedProtocol);
|
||||
|
||||
return sslSocket;
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,168 @@
|
|||
/*
|
||||
* Copyright 2015, Google Inc. All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions are
|
||||
* met:
|
||||
*
|
||||
* * Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
* * Redistributions in binary form must reproduce the above
|
||||
* copyright notice, this list of conditions and the following disclaimer
|
||||
* in the documentation and/or other materials provided with the
|
||||
* distribution.
|
||||
*
|
||||
* * Neither the name of Google Inc. nor the names of its
|
||||
* contributors may be used to endorse or promote products derived from
|
||||
* this software without specific prior written permission.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||||
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||||
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
||||
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
||||
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||||
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||||
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||||
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
*/
|
||||
|
||||
package com.squareup.okhttp.internal;
|
||||
|
||||
import com.squareup.okhttp.Protocol;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.net.Socket;
|
||||
import java.util.List;
|
||||
|
||||
import javax.net.ssl.SSLSocket;
|
||||
|
||||
/**
|
||||
* A helper class located in package com.squareup.okhttp.internal for TLS negotiation.
|
||||
*/
|
||||
public class OkHttpProtocolNegotiator {
|
||||
private static Platform platform = Platform.get();
|
||||
|
||||
// setUseSessionTickets(boolean)
|
||||
private static final OptionalMethod<Socket> SET_USE_SESSION_TICKETS =
|
||||
new OptionalMethod<Socket>(null, "setUseSessionTickets", Boolean.TYPE);
|
||||
// setHostname(String)
|
||||
private static final OptionalMethod<Socket> SET_HOSTNAME =
|
||||
new OptionalMethod<Socket>(null, "setHostname", String.class);
|
||||
// byte[] getAlpnSelectedProtocol()
|
||||
private static final OptionalMethod<Socket> GET_ALPN_SELECTED_PROTOCOL =
|
||||
new OptionalMethod<Socket>(byte[].class, "getAlpnSelectedProtocol");
|
||||
// setAlpnSelectedProtocol(byte[])
|
||||
private static final OptionalMethod<Socket> SET_ALPN_PROTOCOLS =
|
||||
new OptionalMethod<Socket>(null, "setAlpnProtocols", byte[].class);
|
||||
// byte[] getNpnSelectedProtocol()
|
||||
private static final OptionalMethod<Socket> GET_NPN_SELECTED_PROTOCOL =
|
||||
new OptionalMethod<Socket>(byte[].class, "getNpnSelectedProtocol");
|
||||
private static boolean android;
|
||||
|
||||
/**
|
||||
* Start and wait until the negotiation is done, returns the negotiated protocol.
|
||||
*/
|
||||
public static String negotiate(
|
||||
SSLSocket sslSocket, String hostname, List<Protocol> protocols) throws IOException {
|
||||
configureTlsExtensions(sslSocket, hostname, protocols);
|
||||
|
||||
// It's possible that the user provided SSLSocketFactory has already done the handshake
|
||||
// when creates the SSLSocket.
|
||||
String negotiatedProtocol = getSelectedProtocol(sslSocket);
|
||||
if (negotiatedProtocol == null) {
|
||||
try {
|
||||
// Force handshake.
|
||||
sslSocket.startHandshake();
|
||||
|
||||
negotiatedProtocol = OkHttpProtocolNegotiator.getSelectedProtocol(sslSocket);
|
||||
if (negotiatedProtocol == null) {
|
||||
throw new RuntimeException("protocol negotiation failed");
|
||||
}
|
||||
} finally {
|
||||
afterHandshake(sslSocket);
|
||||
}
|
||||
}
|
||||
return negotiatedProtocol;
|
||||
}
|
||||
|
||||
/**
|
||||
* Override {@link Platform}'s configureTlsExtensions for Android older than 5.0, since OkHttp
|
||||
* (2.3+) only support such function for Android 5.0+.
|
||||
*/
|
||||
private static void configureTlsExtensions(
|
||||
SSLSocket sslSocket, String hostname, List<Protocol> protocols) {
|
||||
if (!android) {
|
||||
platform.configureTlsExtensions(sslSocket, hostname, protocols);
|
||||
return;
|
||||
}
|
||||
|
||||
// Enable SNI and session tickets.
|
||||
if (hostname != null) {
|
||||
SET_USE_SESSION_TICKETS.invokeOptionalWithoutCheckedException(sslSocket, true);
|
||||
SET_HOSTNAME.invokeOptionalWithoutCheckedException(sslSocket, hostname);
|
||||
}
|
||||
|
||||
// Enable ALPN.
|
||||
if (SET_ALPN_PROTOCOLS.isSupported(sslSocket)) {
|
||||
Object[] parameters = {platform.concatLengthPrefixed(protocols)};
|
||||
SET_ALPN_PROTOCOLS.invokeWithoutCheckedException(sslSocket, parameters);
|
||||
}
|
||||
}
|
||||
|
||||
private static void afterHandshake(SSLSocket sslSocket) {
|
||||
if (!android) {
|
||||
platform.afterHandshake(sslSocket);
|
||||
}
|
||||
}
|
||||
|
||||
/** Returns the negotiated protocol, or null if no protocol was negotiated. */
|
||||
public static String getSelectedProtocol(SSLSocket socket) {
|
||||
if (!android) {
|
||||
return platform.getSelectedProtocol(socket);
|
||||
}
|
||||
|
||||
if (GET_ALPN_SELECTED_PROTOCOL.isSupported(socket)) {
|
||||
try {
|
||||
byte[] alpnResult =
|
||||
(byte[]) GET_ALPN_SELECTED_PROTOCOL.invokeWithoutCheckedException(socket);
|
||||
if (alpnResult != null) {
|
||||
return new String(alpnResult, Util.UTF_8);
|
||||
}
|
||||
} catch (Exception e) {
|
||||
// In some implementations, querying selected protocol before the handshake will fail with
|
||||
// exception.
|
||||
}
|
||||
}
|
||||
|
||||
if (GET_NPN_SELECTED_PROTOCOL.isSupported(socket)) {
|
||||
try {
|
||||
byte[] npnResult = (byte[]) GET_NPN_SELECTED_PROTOCOL.invokeWithoutCheckedException(socket);
|
||||
if (npnResult != null) {
|
||||
return new String(npnResult, Util.UTF_8);
|
||||
}
|
||||
} catch (Exception e) {
|
||||
// In some implementations, querying selected protocol before the handshake will fail with
|
||||
// exception.
|
||||
}
|
||||
}
|
||||
return null;
|
||||
}
|
||||
|
||||
static {
|
||||
android = true;
|
||||
try {
|
||||
// Attempt to find Android 2.3+ APIs.
|
||||
Class.forName("com.android.org.conscrypt.OpenSSLSocketImpl");
|
||||
} catch (ClassNotFoundException ignored) {
|
||||
try {
|
||||
// Older platform before being unbundled.
|
||||
Class.forName("org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl");
|
||||
} catch (ClassNotFoundException ignored2) {
|
||||
android = false;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
@ -1,88 +0,0 @@
|
|||
/*
|
||||
* Copyright 2014, Google Inc. All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions are
|
||||
* met:
|
||||
*
|
||||
* * Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
* * Redistributions in binary form must reproduce the above
|
||||
* copyright notice, this list of conditions and the following disclaimer
|
||||
* in the documentation and/or other materials provided with the
|
||||
* distribution.
|
||||
*
|
||||
* * Neither the name of Google Inc. nor the names of its
|
||||
* contributors may be used to endorse or promote products derived from
|
||||
* this software without specific prior written permission.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||||
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||||
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
||||
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
||||
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||||
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||||
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||||
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
*/
|
||||
|
||||
package com.squareup.okhttp.internal;
|
||||
|
||||
import java.net.Socket;
|
||||
|
||||
import javax.net.ssl.SSLSocket;
|
||||
|
||||
/**
|
||||
* A helper class located in package com.squareup.okhttp.internal for getting protocol
|
||||
* selected by NPN on Android.
|
||||
*/
|
||||
public class SelectedProtocolQuerier {
|
||||
private static Platform platform = Platform.get();
|
||||
|
||||
// byte[] getNpnSelectedProtocol()
|
||||
private static final OptionalMethod<Socket> GET_NPN_SELECTED_PROTOCOL =
|
||||
new OptionalMethod<Socket>(byte[].class, "getNpnSelectedProtocol");
|
||||
private static boolean android;
|
||||
|
||||
/** Returns the negotiated protocol, or null if no protocol was negotiated. */
|
||||
public static String getSelectedProtocol(SSLSocket socket) {
|
||||
String protocol = null;
|
||||
try {
|
||||
protocol = platform.getSelectedProtocol(socket);
|
||||
} catch (Exception e) {
|
||||
// In some implementations, querying selected protocol before the handshake will fail with
|
||||
// exception.
|
||||
}
|
||||
if (protocol == null && android && GET_NPN_SELECTED_PROTOCOL.isSupported(socket)) {
|
||||
byte[] result = null;
|
||||
try {
|
||||
result = (byte[]) GET_NPN_SELECTED_PROTOCOL.invokeWithoutCheckedException(socket);
|
||||
} catch (Exception e) {
|
||||
// In some implementations, querying selected protocol before the handshake will fail with
|
||||
// exception.
|
||||
}
|
||||
if (result != null) {
|
||||
protocol = new String(result, Util.UTF_8);
|
||||
}
|
||||
}
|
||||
return protocol;
|
||||
}
|
||||
|
||||
static {
|
||||
android = true;
|
||||
try {
|
||||
// Attempt to find Android 2.3+ APIs.
|
||||
Class.forName("com.android.org.conscrypt.OpenSSLSocketImpl");
|
||||
} catch (ClassNotFoundException ignored) {
|
||||
try {
|
||||
// Older platform before being unbundled.
|
||||
Class.forName("org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl");
|
||||
} catch (ClassNotFoundException ignored2) {
|
||||
android = false;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue