Module io.netty5.handler
Package io.netty5.handler.ssl

Interface OpenSslPrivateKeyMethod

  • @UnstableApi
public interface OpenSslPrivateKeyMethod
    Allow customization of private key signing / decrypting (when using RSA). Only supported when using BoringSSL atm.

    • Field Detail

      • SSL_SIGN_RSA_PKCS1_SHA1

        static final int SSL_SIGN_RSA_PKCS1_SHA1

      • SSL_SIGN_RSA_PKCS1_SHA256

        static final int SSL_SIGN_RSA_PKCS1_SHA256

      • SSL_SIGN_RSA_PKCS1_SHA384

        static final int SSL_SIGN_RSA_PKCS1_SHA384

      • SSL_SIGN_RSA_PKCS1_SHA512

        static final int SSL_SIGN_RSA_PKCS1_SHA512

      • SSL_SIGN_ECDSA_SHA1

        static final int SSL_SIGN_ECDSA_SHA1

      • SSL_SIGN_ECDSA_SECP256R1_SHA256

        static final int SSL_SIGN_ECDSA_SECP256R1_SHA256

      • SSL_SIGN_ECDSA_SECP384R1_SHA384

        static final int SSL_SIGN_ECDSA_SECP384R1_SHA384

      • SSL_SIGN_ECDSA_SECP521R1_SHA512

        static final int SSL_SIGN_ECDSA_SECP521R1_SHA512

      • SSL_SIGN_RSA_PSS_RSAE_SHA256

        static final int SSL_SIGN_RSA_PSS_RSAE_SHA256

      • SSL_SIGN_RSA_PSS_RSAE_SHA384

        static final int SSL_SIGN_RSA_PSS_RSAE_SHA384

      • SSL_SIGN_RSA_PSS_RSAE_SHA512

        static final int SSL_SIGN_RSA_PSS_RSAE_SHA512

      • SSL_SIGN_ED25519

        static final int SSL_SIGN_ED25519

      • SSL_SIGN_RSA_PKCS1_MD5_SHA1

        static final int SSL_SIGN_RSA_PKCS1_MD5_SHA1

    • Method Detail

      • sign

        byte[] sign​(SSLEngine engine,
            int signatureAlgorithm,
            byte[] input)
     throws Exception
        Signs the input with the given key and returns the signed bytes.
        Parameters:
        engine - the SSLEngine
        signatureAlgorithm - the algorithm to use for signing
        input - the digest itself
        Returns:
        the signed data (must not be null)
        Throws:
        Exception - thrown if an error is encountered during the signing

      • decrypt

        byte[] decrypt​(SSLEngine engine,
               byte[] input)
        throws Exception
        Decrypts the input with the given key and returns the decrypted bytes.
        Parameters:
        engine - the SSLEngine
        input - the input which should be decrypted
        Returns:
        the decrypted data (must not be null)
        Throws:
        Exception - thrown if an error is encountered during the decrypting