1 /* Transport Security Layer (TLS)
2 * Copyright (c) 2003-2004 Carlos Guzman Alvarez
4 * Permission is hereby granted, free of charge, to any person
5 * obtaining a copy of this software and associated documentation
6 * files (the "Software"), to deal in the Software without restriction,
7 * including without limitation the rights to use, copy, modify, merge,
8 * publish, distribute, sublicense, and/or sell copies of the Software,
9 * and to permit persons to whom the Software is furnished to do so,
10 * subject to the following conditions:
12 * The above copyright notice and this permission notice shall be included
13 * in all copies or substantial portions of the Software.
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
16 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
17 * OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
18 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
19 * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
20 * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
22 * DEALINGS IN THE SOFTWARE.
26 using System.Security.Cryptography.X509Certificates;
28 using Mono.Security.Protocol.Tls;
30 namespace Mono.Security.Protocol.Tls.Handshake.Client
32 internal class TlsClientCertificate : HandshakeMessage
36 public TlsClientCertificate(Context context)
37 : base(context, HandshakeType.Certificate)
45 public override void Update()
53 #region Protected Methods
55 protected override void ProcessAsSsl3()
60 protected override void ProcessAsTls1()
62 #warning "Client certificate selection is unfinished"
63 ClientContext context = (ClientContext)this.Context;
64 string msg = "Client certificate requested by the server and no client certificate specified.";
66 if (context.ClientSettings.Certificates == null ||
67 context.ClientSettings.Certificates.Count == 0)
69 throw new TlsException(AlertDescription.UserCancelled, msg);
72 // Select a valid certificate
73 X509Certificate clientCert = this.Context.ClientSettings.Certificates[0];
75 clientCert = context.SslStream.RaiseClientCertificateSelection(
76 this.Context.ClientSettings.Certificates,
77 new X509Certificate(this.Context.ServerSettings.Certificates[0].RawData),
78 this.Context.ClientSettings.TargetHost,
81 if (clientCert == null)
83 throw new TlsException(AlertDescription.UserCancelled, msg);
86 // Update the selected client certificate
87 context.ClientSettings.ClientCertificate = clientCert;
89 // Write client certificates information to a stream
90 TlsStream stream = new TlsStream();
92 stream.WriteInt24(clientCert.GetRawCertData().Length);
93 stream.Write(clientCert.GetRawCertData());
95 // Compose the message
96 this.WriteInt24((int)stream.Length);
97 this.Write(stream.ToArray());