generate() — netty Function Reference

Architecture documentation for the generate() function in BouncyCastleSelfSignedCertGenerator.java from the netty codebase.

Function java Buffer Allocators

Entity Profile

Buffer→ Allocators→ generate() — netty Function Reference

Dependency Diagram

graph TD
  47790930_3648_5ba2_6448_c4bf855f7ab3["generate()"]
  af19979c_65aa_cb3b_af35_05c59657788b["BouncyCastleSelfSignedCertGenerator"]
  47790930_3648_5ba2_6448_c4bf855f7ab3 -->|defined in| af19979c_65aa_cb3b_af35_05c59657788b
  style 47790930_3648_5ba2_6448_c4bf855f7ab3 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

handler/src/main/java/io/netty/handler/ssl/util/BouncyCastleSelfSignedCertGenerator.java lines 40–58

    static String[] generate(String fqdn, KeyPair keypair, SecureRandom random, Date notBefore, Date notAfter,
                             String algorithm) throws Exception {
        PrivateKey key = keypair.getPrivate();

        // Prepare the information required for generating an X.509 certificate.
        X500Name owner = new X500Name("CN=" + fqdn);
        X509v3CertificateBuilder builder = new JcaX509v3CertificateBuilder(
                owner, new BigInteger(64, random), notBefore, notAfter, owner, keypair.getPublic());

        ContentSigner signer = new JcaContentSignerBuilder(
                algorithm.equalsIgnoreCase("EC") ? "SHA256withECDSA" : "SHA256WithRSAEncryption").build(key);
        X509CertificateHolder certHolder = builder.build(signer);
        X509Certificate cert = new JcaX509CertificateConverter()
                .setProvider(BouncyCastleUtil.getBcProviderJce())
                .getCertificate(certHolder);
        cert.verify(keypair.getPublic());

        return newSelfSignedCertificate(fqdn, key, cert);
    }