netty Architecture Docs
Home / Function/ authenticatingCrossSignedCertificate() — netty Function Reference

authenticatingCrossSignedCertificate() — netty Function Reference

Architecture documentation for the authenticatingCrossSignedCertificate() function in CertificateBuilderTest.java from the netty codebase.

Function java Buffer Search

Entity Profile

Dependency Diagram

graph TD
  810b39c4_99a1_0423_567e_812826f91a61["authenticatingCrossSignedCertificate()"]
  8c85a9d3_f3ae_f481_1984_99bd24f9c654["CertificateBuilderTest"]
  810b39c4_99a1_0423_567e_812826f91a61 -->|defined in| 8c85a9d3_f3ae_f481_1984_99bd24f9c654
  style 810b39c4_99a1_0423_567e_812826f91a61 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

pkitesting/src/test/java/io/netty/pkitesting/CertificateBuilderTest.java lines 444–467

    @Test
    void authenticatingCrossSignedCertificate() throws Exception {
        CertificateBuilder caBuilder = BASE.copy()
                .setIsCertificateAuthority(true)
                .setKeyUsage(true, KeyUsage.digitalSignature, KeyUsage.keyCertSign, KeyUsage.cRLSign);

        // Roots. Different subjects.
        X509Bundle oldRoot = caBuilder.subject("CN=root-a").buildSelfSigned();
        X509Bundle newRoot = caBuilder.subject("CN=root-b").buildSelfSigned();

        // Intermediates. Same subject. Will be cross-signed.
        CertificateBuilder intermediateBuilder = caBuilder.copy().subject("CN=issuer.netty.io");
        X509Bundle oldIssuer = intermediateBuilder.buildIssuedBy(oldRoot);
        X509Bundle crossIssuer = intermediateBuilder.keyPair(oldIssuer.getKeyPair()).buildIssuedBy(newRoot);

        // Leaf. Cross-signed by cross-signed issuer.
        CertificateBuilder leafBuilder = BASE.copy().subject("CN=leaf.netty.io").addExtendedKeyUsageClientAuth();
        X509Bundle leaf = leafBuilder.buildIssuedBy(crossIssuer)
                .mergeIntermediates(leafBuilder.buildIssuedBy(oldIssuer));

        // This trust manager only knows about the old root. It will throw if it can't find a path to it.
        X509TrustManager oldRootTrustManager = (X509TrustManager) oldRoot.toTrustManager();
        oldRootTrustManager.checkClientTrusted(leaf.getCertificatePath(), "UNKNOWN");
    }

Domain

Subdomains

Defined In

Source

Frequently Asked Questions

What does authenticatingCrossSignedCertificate() do?
authenticatingCrossSignedCertificate() is a function in the netty codebase, defined in pkitesting/src/test/java/io/netty/pkitesting/CertificateBuilderTest.java.
Where is authenticatingCrossSignedCertificate() defined?
authenticatingCrossSignedCertificate() is defined in pkitesting/src/test/java/io/netty/pkitesting/CertificateBuilderTest.java at line 444.

Analyze Your Own Codebase

Get architecture documentation, dependency graphs, and domain analysis for your codebase in minutes.

Try Supermodel Free