HandlerSslTest Class — netty Architecture

Source Code

testsuite-jpms/src/test/java/io/netty/testsuite_jpms/test/HandlerSslTest.java lines 58–233

public class HandlerSslTest {

    private static X509Bundle signedCert;
    private Channel clientChannel;
    private Channel serverChannel;
    private Channel serverConnectedChannel;
    private Throwable clientException;
    private Throwable serverException;
    private final CountDownLatch serverLatch = new CountDownLatch(1);
    private final CountDownLatch clientLatch = new CountDownLatch(1);

    @BeforeAll
    public static void setup() throws Exception {
        signedCert = new CertificateBuilder()
                .subject("cn=localhost")
                .setIsCertificateAuthority(true)
                .buildSelfSigned();
    }

    @Test
    public void testSimpleJdkProvider() throws Exception {
        mySetupClientHostnameValidation(
                SslProvider.JDK,
                false);
        assertTrue(clientLatch.await(10, TimeUnit.SECONDS));

        rethrowIfNotNull(clientException);
        assertTrue(serverLatch.await(5, TimeUnit.SECONDS));
        rethrowIfNotNull(serverException);
    }

    @Test
    public void testOpenSslProvider() throws Exception {
        mySetupClientHostnameValidation(
                SslProvider.OPENSSL,
                false);
        assertTrue(clientLatch.await(10, TimeUnit.SECONDS));

        rethrowIfNotNull(clientException);
        assertTrue(serverLatch.await(5, TimeUnit.SECONDS));
        rethrowIfNotNull(serverException);
    }

    private Future<Void> mySetupClientHostnameValidation(SslProvider sslProvider,
                                                         final boolean failureExpected)
            throws Exception {

        final String expectedHost = "localhost";
        SslContext serverSslCtx = forServer(signedCert.getKeyPair().getPrivate(), signedCert.getCertificatePath())
                .sslProvider(sslProvider)
                .trustManager(InsecureTrustManagerFactory.INSTANCE)
                .ciphers(null, IdentityCipherSuiteFilter.INSTANCE)
                .sessionCacheSize(0)
                .sessionTimeout(0)
                .build();

        SslContext clientSslCtx = forClient()
                .sslProvider(sslProvider)
                .trustManager(signedCert.toTrustManagerFactory())
                .ciphers(null, IdentityCipherSuiteFilter.INSTANCE)
                .sessionCacheSize(0)
                .sessionTimeout(0)
                .build();

        serverConnectedChannel = null;
        ServerBootstrap sb = new ServerBootstrap();
        Bootstrap cb = new Bootstrap();

        sb.group(new MultiThreadIoEventLoopGroup(NioIoHandler.newFactory()));
        sb.channel(NioServerSocketChannel.class);
        sb.childHandler(new ChannelInitializer() {
            @Override
            protected void initChannel(Channel ch) throws Exception {
                ChannelPipeline p = ch.pipeline();

                SslHandler handler = serverSslCtx.newHandler(ch.alloc());
                p.addLast(handler);
                p.addLast(new ChannelInboundHandlerAdapter() {
                    @Override
                    public void userEventTriggered(ChannelHandlerContext ctx, Object evt) throws Exception {
                        if (evt == SslHandshakeCompletionEvent.SUCCESS) {