OpenSSL and QUIC using FFM
summary
Shows how Java 22 Foreign Function & Memory API plus Jextract generated bindings replace JNI boilerplate to call OpenSSL through JSSE inside Apache Tomcat, removing tomcat-native and simplifying callbacks and cleanup via arena-tied memory segments. Implementation supports TLS 1.3 including post‑handshake auth, works with OpenSSL 1.1+ via JSSE without tomcat-native, and matches Tomcat‑native performance with extra safety checks. Experimental QUIC via OpenSSL 3.3+ is implemented at API level but stalls on non‑blocking socket polling, so QUIC isn’t ready for production.
AI-written summary · about
chapters (8)
- 0:00Introduction to FFM
- 3:21FFM basics and memory segments
- 6:30Down calls with OpenSSL example
- 8:58Up calls and callbacks
- 13:13JExtract tool for boilerplate
- 19:39Tomcat integration with FFM
- 24:56QUIC support and future plans
- 26:59Summary and Q&A
related talks
08mIntroducing QuicTLS
32mPQC in OpenSSL Library
37mHTTP/3: why and where are we?
35mOn QUIC, HTTP/3 and tech stack unification
29mIntegrating PQC in OpenSSL & Firefox via Loadable Modules for Cryptographic Agility
21mA QUIC Update
48mSecure Java Applications against Quantum Threats
34mQUIC and HTTP/3: Too Big to Fail?!