generateBc() — netty Function Reference

Architecture documentation for the generateBc() function in SelfSignedCertificate.java from the netty codebase.

Function java Buffer Allocators calls 3 called by 1

Entity Profile

Buffer→ Allocators→ generateBc() — netty Function Reference

Dependency Diagram

graph TD
  971b253f_b7f7_89da_da43_0b3d8bc633aa["generateBc()"]
  26855d08_f229_22e6_e88d_3599e590a4a2["Builder"]
  971b253f_b7f7_89da_da43_0b3d8bc633aa -->|defined in| 26855d08_f229_22e6_e88d_3599e590a4a2
  270a4e53_116c_c0dd_b358_bbdc1b1eff19["SelfSignedCertificate()"]
  270a4e53_116c_c0dd_b358_bbdc1b1eff19 -->|calls| 971b253f_b7f7_89da_da43_0b3d8bc633aa
  f05a46fc_04e8_9057_f98f_584536bb9462["isBouncyCastleAvailable()"]
  971b253f_b7f7_89da_da43_0b3d8bc633aa -->|calls| f05a46fc_04e8_9057_f98f_584536bb9462
  b8aa4e6c_99aa_2785_bab6_460c2b940d97["generateKeyPairLocally()"]
  971b253f_b7f7_89da_da43_0b3d8bc633aa -->|calls| b8aa4e6c_99aa_2785_bab6_460c2b940d97
  55257261_dd54_ee20_8f66_3fc4c9b91183["addFailure()"]
  971b253f_b7f7_89da_da43_0b3d8bc633aa -->|calls| 55257261_dd54_ee20_8f66_3fc4c9b91183
  style 971b253f_b7f7_89da_da43_0b3d8bc633aa fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

handler/src/main/java/io/netty/handler/ssl/util/SelfSignedCertificate.java lines 505–523

        boolean generateBc() {
            if (!isBouncyCastleAvailable()) {
                // no need to even try. We can avoid generating the key pair with this check.
                logger.debug("Failed to generate a self-signed X.509 certificate because " +
                        "BouncyCastle PKIX is not available in classpath");
                return false;
            }
            generateKeyPairLocally();
            try {
                // Try Bouncy Castle first as otherwise we will see an IllegalAccessError on more recent JDKs.
                paths = BouncyCastleSelfSignedCertGenerator.generate(
                        fqdn, keypair, randomOrDefault(), notBefore, notAfter, algorithm);
                return true;
            } catch (Throwable t) {
                logger.debug("Failed to generate a self-signed X.509 certificate using Bouncy Castle:", t);
                addFailure(t);
                return false;
            }
        }