package org.owasp.dependencycheck.utils;
   
   import java.io.IOException;
   import java.net.InetAddress;
   import java.net.Socket;
   import java.security.KeyManagementException;
   import java.security.NoSuchAlgorithmException;
   import java.security.SecureRandom;
   import java.util.ArrayList;
  import java.util.Arrays;
  import java.util.List;
  import javax.net.ssl.KeyManager;
  import javax.net.ssl.SSLContext;
  import javax.net.ssl.SSLSocket;
  import javax.net.ssl.SSLSocketFactory;
  import javax.net.ssl.TrustManager;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  
  /**
   * This class is used to enable additional ciphers used by the SSL Socket. This
   * is specifically because the NVD stopped supporting TLS 1.0 and Java 6 and 7
   * clients by default were unable to connect to download the NVD data feeds.
   *
   * The following code was copied from
   * http://stackoverflow.com/questions/1037590/which-cipher-suites-to-enable-for-ssl-socket/23365536#23365536
   *
   * @author <a href="http://stackoverflow.com/users/608639/jww">jww</a>
   */
  public class SSLSocketFactoryEx extends SSLSocketFactory {
  
      /**
       * The Logger for use throughout the class.
       */
      private static final Logger LOGGER = LoggerFactory.getLogger(SSLSocketFactoryEx.class);
  
      /**
       * Constructs a new SSLSocketFactory.
       *
       * @throws NoSuchAlgorithmException thrown when an algorithm is not
       * supported
       * @throws KeyManagementException thrown if initialization fails
       */
      public SSLSocketFactoryEx() throws NoSuchAlgorithmException, KeyManagementException {
          initSSLSocketFactoryEx(null, null, null);
      }
  
      /**
       * Constructs a new SSLSocketFactory.
       *
       * @param km the key manager
       * @param tm the trust manager
       * @param random secure random
       * @throws NoSuchAlgorithmException thrown when an algorithm is not
       * supported
       * @throws KeyManagementException thrown if initialization fails
       */
      public SSLSocketFactoryEx(KeyManager[] km, TrustManager[] tm, SecureRandom random) throws NoSuchAlgorithmException, KeyManagementException {
          initSSLSocketFactoryEx(km, tm, random);
      }
  
      /**
       * Constructs a new SSLSocketFactory.
       *
       * @param ctx the SSL context
       * @throws NoSuchAlgorithmException thrown when an algorithm is not
       * supported
       * @throws KeyManagementException thrown if initialization fails
       */
      public SSLSocketFactoryEx(SSLContext ctx) throws NoSuchAlgorithmException, KeyManagementException {
          initSSLSocketFactoryEx(ctx);
      }
  
      /**
       * Returns the default cipher suites.
       *
       * @return the default cipher suites
       */
      @Override
      public String[] getDefaultCipherSuites() {
          return sslCtxt.getSocketFactory().getDefaultCipherSuites();
      }
  
      /**
       * Returns the supported cipher suites.
       *
       * @return the supported cipher suites
       */
      @Override
      public String[] getSupportedCipherSuites() {
          return sslCtxt.getSocketFactory().getSupportedCipherSuites();
      }
  
      /**
       * Returns the default protocols.
       *
       * @return the default protocols
       */
      public String[] getDefaultProtocols() {
         return Arrays.copyOf(protocols, protocols.length);
     }
 
     /**
      * Returns the supported protocols.
      *
      * @return the supported protocols
      */
     public String[] getSupportedProtocols() {
         return Arrays.copyOf(protocols, protocols.length);
     }
 
     /**
      * Creates an SSL Socket.
      *
      * @param s the base socket
      * @param host the host
      * @param port the port
      * @param autoClose if the socket should auto-close
      * @return the SSL Socket
      * @throws IOException thrown if the creation fails
      */
     @Override
     public Socket createSocket(Socket s, String host, int port, boolean autoClose) throws IOException {
         final SSLSocketFactory factory = sslCtxt.getSocketFactory();
         final SSLSocket ss = (SSLSocket) factory.createSocket(s, host, port, autoClose);
 
         ss.setEnabledProtocols(protocols);
 
         return ss;
     }
 
     /**
      * Creates a new SSL Socket.
      *
      * @param address the address to connect to
      * @param port the port number
      * @param localAddress the local address
      * @param localPort the local port
      * @return the SSL Socket
      * @throws IOException thrown if the creation fails
      */
     @Override
     public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException {
         final SSLSocketFactory factory = sslCtxt.getSocketFactory();
         final SSLSocket ss = (SSLSocket) factory.createSocket(address, port, localAddress, localPort);
 
         ss.setEnabledProtocols(protocols);
 
         return ss;
     }
 
     /**
      * Creates a new SSL Socket.
      *
      * @param host the host to connect to
      * @param port the port to connect to
      * @param localHost the local host
      * @param localPort the local port
      * @return the SSL Socket
      * @throws IOException thrown if the creation fails
      */
     @Override
     public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException {
         final SSLSocketFactory factory = sslCtxt.getSocketFactory();
         final SSLSocket ss = (SSLSocket) factory.createSocket(host, port, localHost, localPort);
 
         ss.setEnabledProtocols(protocols);
 
         return ss;
     }
 
     /**
      * Creates a new SSL Socket.
      *
      * @param host the host to connect to
      * @param port the port to connect to
      * @return the SSL Socket
      * @throws IOException thrown if the creation fails
      */
     @Override
     public Socket createSocket(InetAddress host, int port) throws IOException {
         final SSLSocketFactory factory = sslCtxt.getSocketFactory();
         final SSLSocket ss = (SSLSocket) factory.createSocket(host, port);
 
         ss.setEnabledProtocols(protocols);
 
         return ss;
     }
 
     /**
      * Creates a new SSL Socket.
      *
      * @param host the host to connect to
      * @param port the port to connect to
      * @return the SSL Socket
      * @throws IOException thrown if the creation fails
      */
     @Override
     public Socket createSocket(String host, int port) throws IOException {
         final SSLSocketFactory factory = sslCtxt.getSocketFactory();
         final SSLSocket ss = (SSLSocket) factory.createSocket(host, port);
 
         ss.setEnabledProtocols(protocols);
 
         return ss;
     }
 
     /**
      * Initializes the SSL Socket Factory Extension.
      *
      * @param km the key managers
      * @param tm the trust managers
      * @param random the secure random number generator
      * @throws NoSuchAlgorithmException thrown when an algorithm is not
      * supported
      * @throws KeyManagementException thrown if initialization fails
      */
     private void initSSLSocketFactoryEx(KeyManager[] km, TrustManager[] tm, SecureRandom random)
             throws NoSuchAlgorithmException, KeyManagementException {
         sslCtxt = SSLContext.getInstance("TLS");
         sslCtxt.init(km, tm, random);
 
         protocols = getProtocolList();
     }
 
     /**
      * Initializes the SSL Socket Factory Extension.
      *
      * @param ctx the SSL context
      * @throws NoSuchAlgorithmException thrown when an algorithm is not
      * supported
      * @throws KeyManagementException thrown if initialization fails
      */
     private void initSSLSocketFactoryEx(SSLContext ctx)
             throws NoSuchAlgorithmException, KeyManagementException {
         sslCtxt = ctx;
         protocols = getProtocolList();
     }
 
     /**
      * Returns the protocol list.
      *
      * @return the protocol list
      */
     protected String[] getProtocolList() {
         SSLSocket socket = null;
         String[] availableProtocols = null;
         final String[] preferredProtocols = Settings.getString(
                 Settings.KEYS.DOWNLOADER_TLS_PROTOCOL_LIST,
                 "TLSv1,TLSv1.1,TLSv1.2,TLSv1.3")
                 .split(",");
         try {
             final SSLSocketFactory factory = sslCtxt.getSocketFactory();
             socket = (SSLSocket) factory.createSocket();
 
             availableProtocols = socket.getSupportedProtocols();
             Arrays.sort(availableProtocols);
             if (LOGGER.isDebugEnabled()) {
                 LOGGER.debug("Available Protocols:");
                 for (String p : availableProtocols) {
                     LOGGER.debug(p);
                 }
             }
         } catch (Exception ex) {
             LOGGER.debug("Error getting protocol list, using TLSv1", ex);
             return new String[]{"TLSv1"};
         } finally {
             if (socket != null) {
                 try {
                     socket.close();
                 } catch (IOException ex) {
                     LOGGER.trace("Error closing socket", ex);
                 }
             }
         }
 
         final List<String> aa = new ArrayList<String>();
         for (String preferredProtocol : preferredProtocols) {
             final int idx = Arrays.binarySearch(availableProtocols, preferredProtocol);
             if (idx >= 0) {
                 aa.add(preferredProtocol);
             }
         }
 
         return aa.toArray(new String[0]);
     }
 
     /**
      * The SSL context.
      */
     private SSLContext sslCtxt;
     /**
      * The protocols.
      */
     private String[] protocols;
 }