I can't believe I didn't figure this out earlier, but assuming you can build code that instantiates TLS10Connection (requires the crypto signing key, not sure of any remaining legal issues exist there), you actually can do this. It just requires a little bit of trickery.
First, you open your connection as usual:
StreamConnection socket = (StreamConnection)Connector.open(
"socket://" + serverName + ":" + serverPort,
Connector.READ_WRITE, true);
DataInputStream input = socket.openDataInputStream();
DataOutputStream output = socket.openDataOutputStream();
Then you do whatever protocol I/O is necessary to handshake with the server, query its capabilities, etc. Finally, you send "STARTTLS\r\n", and now want to switch the mode of the socket. Here's how:
TLS10Connection tlsSocket = new TLS10Connection(
new StreamConnectionWrapper(socket, input, output),
serverName + ":" + serverPort,
true);
input = tlsSocket.openDataInputStream();
output = tlsSocket.openDataOutputStream();
The secret to this is StreamConnectionWrapper. You see, if you try creating a TLS10Connection with the original StreamConnection, it will try opening the input/output streams again. This causes I/O exceptions which break everything. So, here's the extremely simple code to the wrapper:
private class StreamConnectionWrapper implements StreamConnection {
private StreamConnection stream;
private DataInputStream dataInputStream;
private DataOutputStream dataOutputStream;
public StreamConnectionWrapper(
StreamConnection stream,
DataInputStream dataInputStream,
DataOutputStream dataOutputStream) {
this.stream = stream;
this.dataInputStream = dataInputStream;
this.dataOutputStream = dataOutputStream;
}
public DataInputStream openDataInputStream() throws IOException {
return dataInputStream;
}
public InputStream openInputStream() throws IOException {
return dataInputStream;
}
public void close() throws IOException {
stream.close();
}
public DataOutputStream openDataOutputStream() throws IOException {
return dataOutputStream;
}
public OutputStream openOutputStream() throws IOException {
return dataOutputStream;
}
}
And that's all there is to it! I seriously can't believe I didn't think of this workaround years ago.
