connectWithX25519MLKEM768() — netty Function Reference

Architecture documentation for the connectWithX25519MLKEM768() function in PkiTestingTlsTest.java from the netty codebase.

Function java Buffer Allocators calls 1

Entity Profile

Buffer→ Allocators→ connectWithX25519MLKEM768() — netty Function Reference

Dependency Diagram

graph TD
  eed95e4e_189c_4491_cee2_0794e8520686["connectWithX25519MLKEM768()"]
  938821ed_7909_bb31_9c78_1d4536ee982b["PkiTestingTlsTest"]
  eed95e4e_189c_4491_cee2_0794e8520686 -->|defined in| 938821ed_7909_bb31_9c78_1d4536ee982b
  a8eac5c5_344b_7e6d_6f39_e94e4efd9850["testTlsConnection()"]
  eed95e4e_189c_4491_cee2_0794e8520686 -->|calls| a8eac5c5_344b_7e6d_6f39_e94e4efd9850
  style eed95e4e_189c_4491_cee2_0794e8520686 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

handler/src/test/java/io/netty/handler/ssl/PkiTestingTlsTest.java lines 150–189

    @EnabledIf("isBoringSSLAvailable")
    @ParameterizedTest
    @ValueSource(booleans = { true, false })
    void connectWithX25519MLKEM768(boolean configureViaParameter) throws Exception {
        X509Bundle cert = new CertificateBuilder()
                .algorithm(CertificateBuilder.Algorithm.ecp256)
                .setIsCertificateAuthority(true)
                .subject("CN=localhost")
                .buildSelfSigned();

        // Disable 128-bit ciphers so only 256-bit ciphers remain.
        String[] ciphers = {"TLS_AES_256_GCM_SHA384",
                            "TLS_CHACHA20_POLY1305_SHA256"};

        String[] groups = new String[]{"X25519MLKEM768"};
        SslContextBuilder serverBuilder = SslContextBuilder.forServer(cert.toKeyManagerFactory())
                .sslProvider(SslProvider.OPENSSL)
                .protocols("TLSv1.3")
                .ciphers(Arrays.asList(ciphers));

        if (!configureViaParameter) {
            serverBuilder.option(OpenSslContextOption.GROUPS, groups.clone());
        }
        final SslContext serverContext = serverBuilder.build();

        SslContextBuilder clientBuilder = SslContextBuilder.forClient()
                .trustManager(cert.toTrustManagerFactory())
                .sslProvider(SslProvider.OPENSSL)
                .serverName(new SNIHostName("localhost"))
                .protocols("TLSv1.3")
                .ciphers(Arrays.asList(ciphers));

        if (!configureViaParameter) {
            clientBuilder.option(OpenSslContextOption.GROUPS, groups.clone());
        }
        final SslContext clientContext = clientBuilder
                .build();

        testTlsConnection(serverContext, clientContext, configureViaParameter ? groups.clone() : null);
    }