yggdrasil/gcc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ClientHandshake.java (RSAGen.implRun): check keyEncipherment bit of the certificate...

Browse Source 
2007-03-28  Casey Marshall  <csm@gnu.org>

	* gnu/javax/net/ssl/provider/ClientHandshake.java (RSAGen.implRun):
	check keyEncipherment bit of the certificate, and just pass the public
	key to the cipher.

From-SVN: r123307
This commit is contained in:
Casey Marshall
2007-03-28 18:25:07 +00:00
committed by Tom Tromey
parent 8eced3a2a9
commit 5a953bf101
4 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libjava/classpath/gnu/javax/net/ssl/provider/ClientHandshake.java
+7 -1
View File
@@ -1082,7 +1082,13 @@ outer_loop:
Cipher rsa = Cipher.getInstance("RSA");
java.security.cert.Certificate cert
= engine.session().getPeerCertificates()[0];
rsa.init(Cipher.ENCRYPT_MODE, cert);
if (cert instanceof X509Certificate)
{
boolean[] keyUsage = ((X509Certificate) cert).getKeyUsage();
if (keyUsage != null && !keyUsage[2])
throw new InvalidKeyException("certificate's keyUsage does not permit keyEncipherment");
}
rsa.init(Cipher.ENCRYPT_MODE, cert.getPublicKey());
encryptedPreMasterSecret = rsa.doFinal(preMasterSecret);
// Generate our session keys, because we can.