x25519MLKEM768Interoperability() — netty Function Reference

Architecture documentation for the x25519MLKEM768Interoperability() function in PkiTestingTlsTest.java from the netty codebase.

Function java Buffer Allocators calls 1

Entity Profile

Buffer→ Allocators→ x25519MLKEM768Interoperability() — netty Function Reference

Dependency Diagram

graph TD
  d960b596_11c1_9f7a_3c78_b975a04730e6["x25519MLKEM768Interoperability()"]
  938821ed_7909_bb31_9c78_1d4536ee982b["PkiTestingTlsTest"]
  d960b596_11c1_9f7a_3c78_b975a04730e6 -->|defined in| 938821ed_7909_bb31_9c78_1d4536ee982b
  a8eac5c5_344b_7e6d_6f39_e94e4efd9850["testTlsConnection()"]
  d960b596_11c1_9f7a_3c78_b975a04730e6 -->|calls| a8eac5c5_344b_7e6d_6f39_e94e4efd9850
  style d960b596_11c1_9f7a_3c78_b975a04730e6 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

handler/src/test/java/io/netty/handler/ssl/PkiTestingTlsTest.java lines 199–242

    @EnabledIf("isBoringSSLAvailable")
    @ParameterizedTest
    @MethodSource("interoperabilityParams")
    void x25519MLKEM768Interoperability(boolean enabledOnClient, String[] protocols) throws Exception {
        X509Bundle cert = new CertificateBuilder()
                .algorithm(CertificateBuilder.Algorithm.ecp256)
                .setIsCertificateAuthority(true)
                .subject("CN=localhost")
                .buildSelfSigned();

        String[] classicalGroups = new String[] {
                "x25519",
                "secp256r1",
                "secp384r1",
                "secp521r1",
        };

        String[] interoperableGroups = new String[] {
                "X25519MLKEM768",
                "x25519",
                "secp256r1",
                "secp384r1",
                "secp521r1",
        };

        SslContextBuilder serverBuilder = SslContextBuilder.forServer(cert.toKeyManagerFactory())
                .sslProvider(SslProvider.OPENSSL)
                .protocols(protocols);
        SslContextBuilder clientBuilder = SslContextBuilder.forClient()
                .trustManager(cert.toTrustManagerFactory())
                .sslProvider(SslProvider.OPENSSL)
                .serverName(new SNIHostName("localhost"))
                .protocols(protocols);

        if (enabledOnClient) {
            clientBuilder.option(OpenSslContextOption.GROUPS, interoperableGroups);
            serverBuilder.option(OpenSslContextOption.GROUPS, classicalGroups);
        } else {
            clientBuilder.option(OpenSslContextOption.GROUPS, classicalGroups);
            serverBuilder.option(OpenSslContextOption.GROUPS, interoperableGroups);
        }

        testTlsConnection(serverBuilder.build(), clientBuilder.build(), null);
    }