import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Copied from <code>org.apache.catalina.valves.CertificateValve</code>
 */
public Integer getKeySize() 
    throws IOException {
    // Look up the current SSLSession
    SSLSupport.CipherData c_aux[]=ciphers;
    if (session == null)
        return null;
    Integer keySize = (Integer) session.getValue(KEY_SIZE_KEY);
    if (keySize == null) {
        int size = 0;
        String cipherSuite = session.getCipherSuite();
        for (int i = 0; i < c_aux.length; i++) {
            if (cipherSuite.indexOf(c_aux[i].phrase) >= 0) {
                size = c_aux[i].keySize;
                break;
            }
        }
        keySize = new Integer(size);
        session.putValue(KEY_SIZE_KEY, keySize);
    }
    return keySize;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Look for SSL session ID if required. Only look for SSL Session ID if it
 * is the only tracking method enabled.
 */
protected void parseSessionSslId(Request request) {
    if (request.getRequestedSessionId() == null &&
            SSL_ONLY.equals(request.getServletContext()
                    .getEffectiveSessionTrackingModes()) &&
                    request.connector.secure) {
        // TODO Is there a better way to map SSL sessions to our sesison ID?
        // TODO The request.getAttribute() will cause a number of other SSL
        //      attribute to be populated. Is this a performance concern?
        request.setRequestedSessionId(
                request.getAttribute(SSLSupport.SESSION_ID_KEY).toString());
        request.setRequestedSessionSSL(true);
    }
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Copied from <code>org.apache.catalina.valves.CertificateValve</code>
 */
@Override
public Integer getKeySize()
    throws IOException {
    // Look up the current SSLSession
    SSLSupport.CipherData c_aux[]=ciphers;
    if (session == null)
        return null;

    Integer keySize = null;
    synchronized(keySizeCache) {
        keySize = keySizeCache.get(session);
    }

    if (keySize == null) {
        int size = 0;
        String cipherSuite = session.getCipherSuite();
        for (int i = 0; i < c_aux.length; i++) {
            if (cipherSuite.indexOf(c_aux[i].phrase) >= 0) {
                size = c_aux[i].keySize;
                break;
            }
        }
        keySize = Integer.valueOf(size);
        synchronized(keySizeCache) {
            keySizeCache.put(session, keySize);
        }
    }
    return keySize;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
public SSLSupport getSSLSupport(SSLSession session) {
    SSLSupport ssls = factory.getSSLSupport(session);
    return ssls;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
public SSLSupport getSSLSupport(javax.net.ssl.SSLSession session) {
    /*
     * The Tomcat 6.0.26 docs says: This method has been deprecated since it
     * adds a JSSE dependency to this interface. It will be removed in
     * versions after 6.0.x.
     *
     * But we have to provide a implementation of this method because it's
     * declared as abstract.
     *
     * Unfortunately there does not appear to be any way to get SSLSupport
     * information from a session with JSS. JSS looks up the information
     * based on a socket, not a session. This done in SSLSocket.c
     * Java_org_mozilla_jss_ssl_SSLSocket_getStatus().
     *
     * So while it would be nice to provide a working implmentation there
     * doesn't seem to be an easy way to do this. Given that this method is
     * already deprecated and there hasn't been any evidence of it being
     * called it therefore seems reasonable to just return null to satify
     * the compiler's demand for an implementation.
     *
     * Once this abstract method is removed from SSLImplementation in a
     * future release we can remove this stub.
     *
     * NOTE: This method has NOT yet been deprecated in Tomcat 7!
     */
    return null;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Look for SSL session ID if required. Only look for SSL Session ID if it
 * is the only tracking method enabled.
 */
protected void parseSessionSslId(Request request) {
	if (request.getRequestedSessionId() == null
			&& SSL_ONLY.equals(request.getServletContext().getEffectiveSessionTrackingModes())
			&& request.connector.secure) {
		// TODO Is there a better way to map SSL sessions to our sesison ID?
		// TODO The request.getAttribute() will cause a number of other SSL
		// attribute to be populated. Is this a performance concern?
		request.setRequestedSessionId(request.getAttribute(SSLSupport.SESSION_ID_KEY).toString());
		request.setRequestedSessionSSL(true);
	}
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Copied from <code>org.apache.catalina.valves.CertificateValve</code>
 */
@Override
public Integer getKeySize() throws IOException {
	// Look up the current SSLSession
	SSLSupport.CipherData c_aux[] = ciphers;
	if (session == null)
		return null;

	Integer keySize = null;
	synchronized (keySizeCache) {
		keySize = keySizeCache.get(session);
	}

	if (keySize == null) {
		int size = 0;
		String cipherSuite = session.getCipherSuite();
		for (int i = 0; i < c_aux.length; i++) {
			if (cipherSuite.indexOf(c_aux[i].phrase) >= 0) {
				size = c_aux[i].keySize;
				break;
			}
		}
		keySize = Integer.valueOf(size);
		synchronized (keySizeCache) {
			keySizeCache.put(session, keySize);
		}
	}
	return keySize;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
public WantCertJSSESupport(SSLSocket sock) {
   	this.ssl = sock;

   	try {
           Class<?> clazz = Class.forName(TOMCAT_JSSE_SUPPORT);
           Constructor<?> cons = clazz.getDeclaredConstructor(SSLSocket.class);
           cons.setAccessible(true);
           this.jseeSupport = (SSLSupport) cons.newInstance(sock);
	} catch (Exception ex) {ex.printStackTrace();
		throw new RuntimeException("Error creating  object " + TOMCAT_JSSE_SUPPORT);
		
	}
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Copied from <code>org.apache.catalina.valves.CertificateValve</code>
 */
@Override
public Integer getKeySize() 
    throws IOException {
    // Look up the current SSLSession
    SSLSupport.CipherData c_aux[]=ciphers;
    if (session == null)
        return null;
    
    Integer keySize = null;
    synchronized(keySizeCache) {
        keySize = keySizeCache.get(session);
    }
    
    if (keySize == null) {
        int size = 0;
        String cipherSuite = session.getCipherSuite();
        for (int i = 0; i < c_aux.length; i++) {
            if (cipherSuite.indexOf(c_aux[i].phrase) >= 0) {
                size = c_aux[i].keySize;
                break;
            }
        }
        keySize = Integer.valueOf(size);
        synchronized(keySizeCache) {
            keySizeCache.put(session, keySize);
        }
    }
    return keySize;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Return the specified request attribute if it exists; otherwise, return
 * <code>null</code>.
 *
 * @param name Name of the request attribute to return
 */
@Override
public Object getAttribute(String name) {

    // Special attributes
    SpecialAttributeAdapter adapter = specialAttributes.get(name);
    if (adapter != null) {
        return adapter.get(this, name);
    }

    Object attr=attributes.get(name);

    if(attr!=null) {
        return(attr);
    }

    attr =  coyoteRequest.getAttribute(name);
    if(attr != null) {
        return attr;
    }
    if( isSSLAttribute(name) || name.equals(SSLSupport.PROTOCOL_VERSION_KEY)) {
        coyoteRequest.action(ActionCode.REQ_SSL_ATTRIBUTE,
                             coyoteRequest);
        attr = coyoteRequest.getAttribute(Globals.CERTIFICATES_ATTR);
        if( attr != null) {
            attributes.put(Globals.CERTIFICATES_ATTR, attr);
        }
        attr = coyoteRequest.getAttribute(Globals.CIPHER_SUITE_ATTR);
        if(attr != null) {
            attributes.put(Globals.CIPHER_SUITE_ATTR, attr);
        }
        attr = coyoteRequest.getAttribute(Globals.KEY_SIZE_ATTR);
        if(attr != null) {
            attributes.put(Globals.KEY_SIZE_ATTR, attr);
        }
        attr = coyoteRequest.getAttribute(Globals.SSL_SESSION_ID_ATTR);
        if(attr != null) {
            attributes.put(Globals.SSL_SESSION_ID_ATTR, attr);
            attributes.put(Globals.SSL_SESSION_ID_TOMCAT_ATTR, attr);
        }
        attr = coyoteRequest.getAttribute(Globals.SSL_SESSION_MGR_ATTR);
        if(attr != null) {
            attributes.put(Globals.SSL_SESSION_MGR_ATTR, attr);
        }
        attr = coyoteRequest.getAttribute(SSLSupport.PROTOCOL_VERSION_KEY);
        if(attr != null) {
            attributes.put(SSLSupport.PROTOCOL_VERSION_KEY, attr);
        }
        attr = attributes.get(name);
        sslAttributesParsed = true;
    }
    return attr;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
@Override
public void setSslSupport(SSLSupport sslSupport) {
    // Should never reach this code but in case we do...
    throw new IllegalStateException(
            sm.getString("ajpprocessor.ssl.notsupported"));
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
@Override
public final void setSslSupport(SSLSupport sslSupport) {
    // NOOP
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
@Override
public void setSslSupport(SSLSupport sslSupport) {
    // NOOP for APR
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Set the SSL information for this HTTP connection.
 */
@Override
public void setSslSupport(SSLSupport sslSupport) {
    this.sslSupport = sslSupport;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
@Override
public SSLSupport getSSLSupport(Socket s) {
    return new JSSESupport((SSLSocket) s);
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * Set the SSL information for this HTTP connection.
 */
public void setSSLSupport(SSLSupport sslSupport) {
    this.sslSupport = sslSupport;
}
 

import org.apache.tomcat.util.net.SSLSupport; //导入依赖的package包/类
/**
 * returns the SSLSupport attached to this socket.
 */
public SSLSupport getSSLSupport(Socket socket) {
    return new JSSESupport((SSLSocket)socket);
}