io.netty.handler.ssl

Interface OpenSslPrivateKeyMethod

@UnstableApi
public interface OpenSslPrivateKeyMethod

Allow to customize private key signing / decrypting (when using RSA). Only supported when using BoringSSL atm.

Field Summary

Fields

Modifier and Type	Field and Description
static int	SSL_SIGN_ECDSA_SECP256R1_SHA256
static int	SSL_SIGN_ECDSA_SECP384R1_SHA384
static int	SSL_SIGN_ECDSA_SECP521R1_SHA512
static int	SSL_SIGN_ECDSA_SHA1
static int	SSL_SIGN_ED25519
static int	SSL_SIGN_RSA_PKCS1_MD5_SHA1
static int	SSL_SIGN_RSA_PKCS1_SHA1
static int	SSL_SIGN_RSA_PKCS1_SHA256
static int	SSL_SIGN_RSA_PKCS1_SHA384
static int	SSL_SIGN_RSA_PKCS1_SHA512
static int	SSL_SIGN_RSA_PSS_RSAE_SHA256
static int	SSL_SIGN_RSA_PSS_RSAE_SHA384
static int	SSL_SIGN_RSA_PSS_RSAE_SHA512

Method Summary

Modifier and Type	Method and Description
byte[]	decrypt(SSLEngine engine, byte[] input) Decrypts the input with the given key and returns the decrypted bytes.
byte[]	sign(SSLEngine engine, int signatureAlgorithm, byte[] input) Signs the input with the given key and returns the signed bytes.

Field Detail

SSL_SIGN_RSA_PKCS1_SHA1

static final int SSL_SIGN_RSA_PKCS1_SHA1

SSL_SIGN_RSA_PKCS1_SHA256

static final int SSL_SIGN_RSA_PKCS1_SHA256

SSL_SIGN_RSA_PKCS1_SHA384

static final int SSL_SIGN_RSA_PKCS1_SHA384

SSL_SIGN_RSA_PKCS1_SHA512

static final int SSL_SIGN_RSA_PKCS1_SHA512

SSL_SIGN_ECDSA_SHA1

static final int SSL_SIGN_ECDSA_SHA1

SSL_SIGN_ECDSA_SECP256R1_SHA256

static final int SSL_SIGN_ECDSA_SECP256R1_SHA256

SSL_SIGN_ECDSA_SECP384R1_SHA384

static final int SSL_SIGN_ECDSA_SECP384R1_SHA384

SSL_SIGN_ECDSA_SECP521R1_SHA512

static final int SSL_SIGN_ECDSA_SECP521R1_SHA512

SSL_SIGN_RSA_PSS_RSAE_SHA256

static final int SSL_SIGN_RSA_PSS_RSAE_SHA256

SSL_SIGN_RSA_PSS_RSAE_SHA384

static final int SSL_SIGN_RSA_PSS_RSAE_SHA384

SSL_SIGN_RSA_PSS_RSAE_SHA512

static final int SSL_SIGN_RSA_PSS_RSAE_SHA512

SSL_SIGN_ED25519

static final int SSL_SIGN_ED25519

SSL_SIGN_RSA_PKCS1_MD5_SHA1

static final int SSL_SIGN_RSA_PKCS1_MD5_SHA1

Method Detail

sign

byte[] sign(SSLEngine engine,
            int signatureAlgorithm,
            byte[] input)
     throws Exception

Signs the input with the given key and returns the signed bytes.

Parameters:

engine - the SSLEngine

signatureAlgorithm - the algorithm to use for signing

input - the digest itself

Returns:

the signed data (must not be null)

Throws:

Exception - thrown if an error is encountered during the signing

decrypt

byte[] decrypt(SSLEngine engine,
               byte[] input)
        throws Exception

Decrypts the input with the given key and returns the decrypted bytes.

Parameters:

engine - the SSLEngine

input - the input which should be decrypted

Returns:

the decrypted data (must not be null)

Throws:

Exception - thrown if an error is encountered during the decrypting