Skip to content

Commit effdc8f

Browse files
committed
Polish "Honour SSL key alias when using Netty"
See gh-19197
1 parent eda7b7c commit effdc8f

File tree

2 files changed

+11
-9
lines changed

2 files changed

+11
-9
lines changed

spring-boot-project/spring-boot/src/main/java/org/springframework/boot/web/embedded/netty/SslServerCustomizer.java

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,7 @@
5555
*
5656
* @author Brian Clozel
5757
* @author Raheela Aslam
58+
* @author Chris Bono
5859
* @since 2.0.0
5960
*/
6061
public class SslServerCustomizer implements NettyServerCustomizer {
@@ -185,30 +186,30 @@ private KeyStore loadStore(String type, String provider, String resource, String
185186
* {@link ConfigurableAliasKeyManager}. The actual SPI has to be wrapped as well due
186187
* to the fact that {@link KeyManagerFactory#getKeyManagers()} is final.
187188
*/
188-
private static class ConfigurableAliasKeyManagerFactory extends KeyManagerFactory {
189+
private static final class ConfigurableAliasKeyManagerFactory extends KeyManagerFactory {
189190

190-
static final ConfigurableAliasKeyManagerFactory instance(String alias, String algorithm)
191+
private static ConfigurableAliasKeyManagerFactory instance(String alias, String algorithm)
191192
throws NoSuchAlgorithmException {
192193
KeyManagerFactory originalFactory = KeyManagerFactory.getInstance(algorithm);
193194
ConfigurableAliasKeyManagerFactorySpi spi = new ConfigurableAliasKeyManagerFactorySpi(originalFactory,
194195
alias);
195196
return new ConfigurableAliasKeyManagerFactory(spi, originalFactory.getProvider(), algorithm);
196197
}
197198

198-
ConfigurableAliasKeyManagerFactory(ConfigurableAliasKeyManagerFactorySpi spi, Provider provider,
199+
private ConfigurableAliasKeyManagerFactory(ConfigurableAliasKeyManagerFactorySpi spi, Provider provider,
199200
String algorithm) {
200201
super(spi, provider, algorithm);
201202
}
202203

203204
}
204205

205-
private static class ConfigurableAliasKeyManagerFactorySpi extends KeyManagerFactorySpi {
206+
private static final class ConfigurableAliasKeyManagerFactorySpi extends KeyManagerFactorySpi {
206207

207208
private KeyManagerFactory originalFactory;
208209

209210
private String alias;
210211

211-
ConfigurableAliasKeyManagerFactorySpi(KeyManagerFactory originalFactory, String alias) {
212+
private ConfigurableAliasKeyManagerFactorySpi(KeyManagerFactory originalFactory, String alias) {
212213
this.originalFactory = originalFactory;
213214
this.alias = alias;
214215
}
@@ -238,13 +239,13 @@ private ConfigurableAliasKeyManager wrapKeyManager(X509ExtendedKeyManager km) {
238239

239240
}
240241

241-
private static class ConfigurableAliasKeyManager extends X509ExtendedKeyManager {
242+
private static final class ConfigurableAliasKeyManager extends X509ExtendedKeyManager {
242243

243244
private final X509ExtendedKeyManager keyManager;
244245

245246
private final String alias;
246247

247-
ConfigurableAliasKeyManager(X509ExtendedKeyManager keyManager, String alias) {
248+
private ConfigurableAliasKeyManager(X509ExtendedKeyManager keyManager, String alias) {
248249
this.keyManager = keyManager;
249250
this.alias = alias;
250251
}

spring-boot-project/spring-boot/src/test/java/org/springframework/boot/web/embedded/netty/NettyReactiveWebServerFactoryTests.java

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,7 @@
4747
* Tests for {@link NettyReactiveWebServerFactory}.
4848
*
4949
* @author Brian Clozel
50+
* @author Chris Bono
5051
*/
5152
public class NettyReactiveWebServerFactoryTests extends AbstractReactiveWebServerFactoryTests {
5253

@@ -94,14 +95,14 @@ public void useForwardedHeaders() {
9495
}
9596

9697
@Test
97-
public void testSslWithValidAlias() {
98+
public void whenSslIsConfiguredWithAValidAliasARequestSucceeds() {
9899
Mono<String> result = testSslWithAlias("test-alias");
99100
StepVerifier.setDefaultTimeout(Duration.ofSeconds(30));
100101
StepVerifier.create(result).expectNext("Hello World").verifyComplete();
101102
}
102103

103104
@Test
104-
public void testSslWithInvalidAlias() {
105+
public void whenSslIsConfiguredWithAnInvalidAliasTheSslHandshakeFails() {
105106
Mono<String> result = testSslWithAlias("test-alias-bad");
106107
StepVerifier.setDefaultTimeout(Duration.ofSeconds(30));
107108
StepVerifier.create(result).expectErrorMatches((throwable) -> throwable instanceof SSLHandshakeException

0 commit comments

Comments
 (0)