mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake.Client/TlsClientCertificate.cs

   1 // Transport Security Layer (TLS)
   2 // Copyright (c) 2003-2004 Carlos Guzman Alvarez
   3
   4 //
   5 // Permission is hereby granted, free of charge, to any person obtaining
   6 // a copy of this software and associated documentation files (the
   7 // "Software"), to deal in the Software without restriction, including
   8 // without limitation the rights to use, copy, modify, merge, publish,
   9 // distribute, sublicense, and/or sell copies of the Software, and to
  10 // permit persons to whom the Software is furnished to do so, subject to
  11 // the following conditions:
  12 //
  13 // The above copyright notice and this permission notice shall be
  14 // included in all copies or substantial portions of the Software.
  15 //
  16 // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  17 // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  18 // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  19 // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
  20 // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  21 // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  22 // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  23 //\r
  24 \r
  25 using System;
  26 using System.Security.Cryptography.X509Certificates;
  27
  28 using Mono.Security.Protocol.Tls;
  29
  30 namespace Mono.Security.Protocol.Tls.Handshake.Client
  31 {
  32         internal class TlsClientCertificate : HandshakeMessage
  33         {
  34                 #region Constructors
  35
  36                 public TlsClientCertificate(Context context)
  37                         : base(context, HandshakeType.Certificate)
  38                 {
  39                 }
  40
  41                 #endregion
  42
  43                 #region Methods
  44
  45                 public override void Update()
  46                 {
  47                         base.Update();
  48                         this.Reset();
  49                 }
  50
  51                 #endregion
  52
  53                 #region Protected Methods
  54
  55                 protected override void ProcessAsSsl3()
  56                 {
  57                         this.ProcessAsTls1();
  58                 }
  59
  60                 protected override void ProcessAsTls1()
  61                 {
  62 #warning "Client certificate selection is unfinished"
  63                         ClientContext context = (ClientContext)this.Context;
  64                         string msg = "Client certificate requested by the server and no client certificate specified.";
  65
  66                         if (context.ClientSettings.Certificates == null ||
  67                                 context.ClientSettings.Certificates.Count == 0)
  68                         {
  69                                 throw new TlsException(AlertDescription.UserCancelled, msg);
  70                         }
  71
  72                         // Select a valid certificate
  73                         X509Certificate clientCert = this.Context.ClientSettings.Certificates[0];
  74
  75                         clientCert = context.SslStream.RaiseClientCertificateSelection(
  76                                 this.Context.ClientSettings.Certificates,
  77                                 new X509Certificate(this.Context.ServerSettings.Certificates[0].RawData),
  78                                 this.Context.ClientSettings.TargetHost,
  79                                 null);
  80
  81                         if (clientCert == null)
  82                         {
  83                                 throw new TlsException(AlertDescription.UserCancelled, msg);
  84                         }
  85
  86                         // Update the selected client certificate
  87                         context.ClientSettings.ClientCertificate = clientCert;
  88
  89                         // Write client certificates information to a stream
  90                         TlsStream stream = new TlsStream();
  91
  92                         stream.WriteInt24(clientCert.GetRawCertData().Length);
  93                         stream.Write(clientCert.GetRawCertData());
  94
  95                         // Compose the message
  96                         this.WriteInt24((int)stream.Length);
  97                         this.Write(stream.ToArray());
  98                 }
  99
 100                 #endregion
 101         }
 102 }