verify() — netty Function Reference

Architecture documentation for the verify() function in ReferenceCountedOpenSslContext.java from the netty codebase.

Function java Buffer Allocators calls 2

Entity Profile

Buffer→ Allocators→ verify() — netty Function Reference

Dependency Diagram

graph TD
  88eaa78d_7923_5b08_eaca_7292b4cd8e6a["verify()"]
  bd6cb3cd_28ba_9556_fe33_80dfb47504fa["AbstractCertificateVerifier"]
  88eaa78d_7923_5b08_eaca_7292b4cd8e6a -->|defined in| bd6cb3cd_28ba_9556_fe33_80dfb47504fa
  904d85d8_f711_9cf3_f2fd_642b4f3704fc["certificates()"]
  88eaa78d_7923_5b08_eaca_7292b4cd8e6a -->|calls| 904d85d8_f711_9cf3_f2fd_642b4f3704fc
  df831a92_239f_6192_640e_8a708e1ffa88["translateToError()"]
  88eaa78d_7923_5b08_eaca_7292b4cd8e6a -->|calls| df831a92_239f_6192_640e_8a708e1ffa88
  style 88eaa78d_7923_5b08_eaca_7292b4cd8e6a fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

handler/src/main/java/io/netty/handler/ssl/ReferenceCountedOpenSslContext.java lines 849–878

        @Override
        public final int verify(long ssl, byte[][] chain, String auth) {
            final ReferenceCountedOpenSslEngine engine = engines.get(ssl);
            if (engine == null) {
                // May be null if it was destroyed in the meantime.
                return CertificateVerifier.X509_V_ERR_UNSPECIFIED;
            }
            X509Certificate[] peerCerts = certificates(chain);
            try {
                verify(engine, peerCerts, auth);
                return CertificateVerifier.X509_V_OK;
            } catch (Throwable cause) {
                logger.debug("verification of certificate failed", cause);
                engine.initHandshakeException(cause);

                // Try to extract the correct error code that should be used.
                if (cause instanceof OpenSslCertificateException) {
                    // This will never return a negative error code as its validated when constructing the
                    // OpenSslCertificateException.
                    return ((OpenSslCertificateException) cause).errorCode();
                }
                if (cause instanceof CertificateExpiredException) {
                    return CertificateVerifier.X509_V_ERR_CERT_HAS_EXPIRED;
                }
                if (cause instanceof CertificateNotYetValidException) {
                    return CertificateVerifier.X509_V_ERR_CERT_NOT_YET_VALID;
                }
                return translateToError(cause);
            }
        }