JdkDelegatingPrivateKeyMethodTest Class — netty Architecture

Source Code

handler/src/test/java/io/netty/handler/ssl/JdkDelegatingPrivateKeyMethodTest.java lines 73–552

@EnabledIf("isSignatureDelegationSupported")
@Timeout(30)
public class JdkDelegatingPrivateKeyMethodTest {

    private static MockAlternativeKeyProvider mockProvider;
    private static EventLoopGroup GROUP;
    private static X509Bundle RSA_BUNDLE;

    @BeforeAll
    static void setUp() throws Exception {
        Assumptions.assumeTrue(OpenSsl.isAvailable(), "OpenSSL is not available");

        mockProvider = new MockAlternativeKeyProvider();
        Security.addProvider(mockProvider);
        GROUP = new MultiThreadIoEventLoopGroup(NioIoHandler.newFactory());

        // Create server certificate bundle
        RSA_BUNDLE = new CertificateBuilder()
            .subject("CN=localhost, O=Netty, C=US")
            .algorithm(CertificateBuilder.Algorithm.rsa2048)
            .setIsCertificateAuthority(true)
            .setKeyUsage(true, CertificateBuilder.KeyUsage.digitalSignature)
            .addExtendedKeyUsageServerAuth()
            .buildSelfSigned();
    }

    @AfterAll
    static void tearDown() {
        if (GROUP != null) {
            GROUP.shutdownGracefully();
        }
        if (mockProvider != null) {
            Security.removeProvider(mockProvider.getName());
        }
        RSA_BUNDLE = null;
    }

    /**
     * Test scenarios for client/server alternative key combinations
     */
    public enum TestScenario {
        SERVER_ALTERNATIVE_CLIENT_STANDARD("Server Alternative + Client Standard", true, false),
        SERVER_STANDARD_CLIENT_ALTERNATIVE("Server Standard + Client Alternative", false, true),
        BOTH_ALTERNATIVE("Both Alternative", true, true);

        final String description;
        final boolean serverUsesAlternativeKey;
        final boolean clientUsesAlternativeKey;

        TestScenario(String description, boolean serverUsesAlternativeKey, boolean clientUsesAlternativeKey) {
            this.description = description;
            this.serverUsesAlternativeKey = serverUsesAlternativeKey;
            this.clientUsesAlternativeKey = clientUsesAlternativeKey;
        }

        @Override
        public String toString() {
            return description;
        }
    }

    /**
     * Test data for supported signature algorithms
     */
    static Stream<Arguments> supportedAlgorithms() {
        return Stream.of(true, false).flatMap(clientUsesProvider ->
        Stream.of(
            // RSA PKCS#1 algorithms
            Arguments.of("RSA PKCS#1 SHA1", OpenSslAsyncPrivateKeyMethod.SSL_SIGN_RSA_PKCS1_SHA1,
                    CertificateBuilder.Algorithm.rsa2048, clientUsesProvider),
            Arguments.of("RSA PKCS#1 SHA256", OpenSslAsyncPrivateKeyMethod.SSL_SIGN_RSA_PKCS1_SHA256,
                    CertificateBuilder.Algorithm.rsa2048, clientUsesProvider),
            Arguments.of("RSA PKCS#1 SHA384", OpenSslAsyncPrivateKeyMethod.SSL_SIGN_RSA_PKCS1_SHA384,
                    CertificateBuilder.Algorithm.rsa2048, clientUsesProvider),
            Arguments.of("RSA PKCS#1 SHA512", OpenSslAsyncPrivateKeyMethod.SSL_SIGN_RSA_PKCS1_SHA512,
                    CertificateBuilder.Algorithm.rsa2048, clientUsesProvider),
            Arguments.of("RSA PKCS#1 MD5+SHA1", OpenSslAsyncPrivateKeyMethod.SSL_SIGN_RSA_PKCS1_MD5_SHA1,
                    CertificateBuilder.Algorithm.rsa2048, clientUsesProvider),

            // RSA-PSS algorithms
            Arguments.of("RSA-PSS SHA256", OpenSslAsyncPrivateKeyMethod.SSL_SIGN_RSA_PSS_RSAE_SHA256,