selectMaterial() — netty Function Reference

Source Code

codec-classes-quic/src/main/java/io/netty/handler/codec/quic/BoringSSLCertificateCallback.java lines 193–224

    private long @Nullable [] selectMaterial(long ssl, QuicheQuicSslEngine engine, String alias)  {
        X509Certificate[] certificates = keyManager.getCertificateChain(alias);
        if (certificates == null || certificates.length == 0) {
            return null;
        }
        byte[][] certs = new byte[certificates.length][];

        for (int i = 0; i < certificates.length; i++) {
            try {
                certs[i] = certificates[i].getEncoded();
            } catch (CertificateEncodingException e) {
                return null;
            }
        }

        final long key;
        PrivateKey privateKey = keyManager.getPrivateKey(alias);
        if (privateKey == BoringSSLKeylessPrivateKey.INSTANCE) {
            key = 0;
        } else {
            byte[] pemKey = toPemEncoded(privateKey);
            if (pemKey == null) {
                return null;
            }
            key = BoringSSL.EVP_PKEY_parse(pemKey, password);
        }
        long chain = BoringSSL.CRYPTO_BUFFER_stack_new(ssl, certs);
        engine.setLocalCertificateChain(certificates);

        // Return and signal that the key and chain should be released as well.
        return new long[] { key,  chain };
    }