OpenSslKeyMaterialProviderTest Class — netty Architecture

Source Code

handler/src/test/java/io/netty/handler/ssl/OpenSslKeyMaterialProviderTest.java lines 41–190

public class OpenSslKeyMaterialProviderTest {

    static final String PASSWORD = "example";
    static final String EXISTING_ALIAS = "1";
    private static final String NON_EXISTING_ALIAS = "nonexisting";

    @BeforeAll
    static void checkOpenSsl() {
        OpenSsl.ensureAvailability();
    }

    protected KeyManagerFactory newKeyManagerFactory() throws Exception {
       return newKeyManagerFactory(KeyManagerFactory.getDefaultAlgorithm());
    }

    protected KeyManagerFactory newKeyManagerFactory(String algorithm) throws Exception {
        char[] password = PASSWORD.toCharArray();
        final KeyStore keystore = KeyStore.getInstance("PKCS12");
        try (InputStream resourceAsStream = getClass().getResourceAsStream("mutual_auth_server.p12")) {
            keystore.load(resourceAsStream, password);

            KeyManagerFactory kmf =
                    KeyManagerFactory.getInstance(algorithm);
            kmf.init(keystore, password);
            return kmf;
        }
    }

    protected OpenSslKeyMaterialProvider newMaterialProvider(KeyManagerFactory factory, String password) {
        return new OpenSslKeyMaterialProvider(ReferenceCountedOpenSslContext.chooseX509KeyManager(
                factory.getKeyManagers()), password);
    }

    protected void assertRelease(OpenSslKeyMaterial material) {
        assertTrue(material.release());
    }

    @Test
    public void testChooseKeyMaterial() throws Exception {
        OpenSslKeyMaterialProvider provider = newMaterialProvider(newKeyManagerFactory(), PASSWORD);
        OpenSslKeyMaterial nonExistingMaterial = provider.chooseKeyMaterial(
                UnpooledByteBufAllocator.DEFAULT, NON_EXISTING_ALIAS);
        assertNull(nonExistingMaterial);

        OpenSslKeyMaterial material = provider.chooseKeyMaterial(UnpooledByteBufAllocator.DEFAULT, EXISTING_ALIAS);
        assertNotNull(material);
        assertNotEquals(0, material.certificateChainAddress());
        assertNotEquals(0, material.privateKeyAddress());
        assertRelease(material);

        provider.destroy();
    }

    /**
     * Test class used by testChooseOpenSslPrivateKeyMaterial().
     */
    private static final class SingleKeyManager implements X509KeyManager {
        private final String keyAlias;
        private final PrivateKey pk;
        private final X509Certificate[] certChain;

        SingleKeyManager(String keyAlias, PrivateKey pk, X509Certificate[] certChain) {
            this.keyAlias = keyAlias;
            this.pk = pk;
            this.certChain = certChain;
        }

        @Override
        public String[] getClientAliases(String keyType, Principal[] issuers) {
            return new String[]{keyAlias};
        }

        @Override
        public String chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket) {
            return keyAlias;
        }

        @Override
        public String[] getServerAliases(String keyType, Principal[] issuers) {
            return new String[]{keyAlias};
        }