160 lines
8.8 KiB
Java
160 lines
8.8 KiB
Java
/*
|
|
* Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 8214513
|
|
* @summary A PKCS12 keystore from Java 8 using custom PBE parameters cannot be read in Java 11
|
|
*/
|
|
|
|
import javax.crypto.spec.PBEParameterSpec;
|
|
import java.io.*;
|
|
import java.security.KeyStore;
|
|
import java.security.PrivateKey;
|
|
import java.security.cert.Certificate;
|
|
|
|
public class WrongPBES2 {
|
|
|
|
private static final char[] PASS = "changeit".toCharArray();
|
|
|
|
// This is a PKCS 12 file using PBES2 with an incorrect encoding before
|
|
// JDK-8202837 is fixed. It is generated with these 2 commands:
|
|
//
|
|
// keytool -genkeypair -alias a -dname CN=A -keystore ks -storepass changeit
|
|
// $JDK10/bin/java WrongPBES2 reenc
|
|
static final String P12_FILE =
|
|
"308208940201033082084d06092a864886f70d010701a082083e0482083a3082" +
|
|
"08363082035206092a864886f70d010701a08203430482033f3082033b308203" +
|
|
"37060b2a864886f70d010c0a0102a08202ee308202ea307406092a864886f70d" +
|
|
"01050d306706092a864886f70d01050d305a303906092a864886f70d01050c30" +
|
|
"2c0414000000000000000000000000000000000000000002030186a002012030" +
|
|
"0c06082a864886f70d020b0500301d060960864801650304012a04105abc352d" +
|
|
"35d98fd77d8c8cf205d690c6048202703ff97bd4488a6a5569993fb6f89792e7" +
|
|
"33632b20fdc502bf0801c8ee80683d064c4dae5b8880ade893a87bfdb4427dfd" +
|
|
"01bc5656fdb50f45f1e8d60b37416d2f3b1be9e8ae145bfe035f9d947fa49a31" +
|
|
"baef86dec6780a0f96a7ad5d9ef850b15f56d6b6f2f0798c190b01b42d955d36" +
|
|
"96f1416efb0c246b56e3715c1ccef701f975f6faf7e7640b8edca79f996682d8" +
|
|
"5a414c8210004f247058c3362f328c12d024ea88de5ab3d6c50a7cf8f32b69de" +
|
|
"999930ccb29be0d278216db0959d9b142e4c46207edaf91f37708e0250e99262" +
|
|
"c4acba4b83c2c0affb3bfc2d5bfe210baffe56ba1f667c9e3c33e0c4164d0c16" +
|
|
"abc89bca2c1af7fc234163a6a17e4852ee08053bdf699c8659ea57f77427ab3b" +
|
|
"cea357a85ffd80589403bc73ff50490f9b0bfb37fedf495aae8ef8a00da7d1e1" +
|
|
"62c49dacf82503e803953f48e302d1ae1b7e7870a479c7861ffc236469807f31" +
|
|
"da0b15a915a62d4f0a42698a4c9779595619effa04765f91342821229752ec6d" +
|
|
"6e0657ad4e41979847b5903ddb6a6819b859797a2f663898694fe294cc85b9c3" +
|
|
"d485516659dcd6d89f631903be35367315b131f9f5ec63ee5bf25f3afcf8bc9c" +
|
|
"d9056a56f951746664cfa3ed0596e005fda6fb753d9c67c92fd1a9f22d06a59e" +
|
|
"9c7af058dddad3b9265fc29c18122f55c07a1780050251990c221ba2b3767586" +
|
|
"405def7a1b224135ac4a694f0e3d27666486531aad9e27a3855f54e2916a642a" +
|
|
"ed06fc5275b675bbf457a26978b0f4306c166119dedc3aedf366cbf34efa647e" +
|
|
"a65b8451c7b1d083fe1ee3a8493a0330ee7da68552614e50ca7326a25d741e40" +
|
|
"ccac2149d1ff5cb8778a3b08ed3d9a1774c971525454b7c20b18610b9bc847cc" +
|
|
"3136301106092a864886f70d01091431041e020061302106092a864886f70d01" +
|
|
"09153114041254696d652031353433363738383539323632308204dc06092a86" +
|
|
"4886f70d010706a08204cd308204c9020100308204c206092a864886f70d0107" +
|
|
"013029060a2a864886f70d010c0106301b0414e6d3162d3b75f103fac6ea3fbf" +
|
|
"96d08c0225d308020300c3508082048834d05f8953cad673f7de3b5446bcdd31" +
|
|
"310b376eec04c393f1077cfda8ad69fe0133cf79fbdd204eeca165e1d6e288b9" +
|
|
"a6625dfe34aa722f230c50da44d463753d3bbd7e762cb0f164b7fbfe4a3aff8c" +
|
|
"dc664ef2c6afd01232de66d81221e977738b81838cadd0fe1f87bdd7278dcdbd" +
|
|
"2307bda516e931691e3da46f82f72073ab6502b9f2b23788c620756eedddf21e" +
|
|
"705a6043d29a8e27285fea79e4a9966f5b08d5f13bc6f4d854f47879ee90e72d" +
|
|
"3a5cc6eccda9edf60c4d73edf3e4dd6c715c06c53e83ba461e10868e5ef5e218" +
|
|
"726bc6714f3071b3f17a075ff9d28d2cb48896b785d48551e8410f2bc882ad04" +
|
|
"88d60c85c3b966e1b484e4190267b38e3179107f3c49abd2b058fb32eab4abfc" +
|
|
"ee914ee4407954e1edb338042ca04b1561df364139a64a1080c79bfdfa17d15b" +
|
|
"6fc26b0572427b2f1b9bbea6d1a730a7dd1b08d22093658f9a5665ae8e9a04b8" +
|
|
"af89a60ea7994d17949b22e2fc6d5d4dd1d280283fd649e1aca6e0e4c90ae509" +
|
|
"afc01bd92127321798562cf5ba75fed840f8ca9082c8c58334a95593fa5b1b57" +
|
|
"ea86cb8452136dee7ecd63872d4848d9052e181f6bca0772a4d4dd43817b9005" +
|
|
"a6314cbd90474a24b6ed9c9896097bba51ca7cd48120b5f9fee3f98dd99bbcd3" +
|
|
"e0ab43bcbb922bcf48cf710f7a5b9d192f419f607b6ca7937d8ed6f990835b88" +
|
|
"7f480cc5fad2708c57c674d0e082af60d8b0108df2bf88b321df4d0431d4dfc0" +
|
|
"4ae21cfd5446715e4af6bcb2224a8d6dc26d71806f21c1e17e8dd2ac57632234" +
|
|
"1d3e72cbcce4c4e59421fc5202ec6d76c623b81a872ab6b8d53e4215234ee8d9" +
|
|
"61148b0f42300fc0c89ec91f528698d79a27af593e5fd56484c97763ebc4a797" +
|
|
"13511ec0e13c59318d1ac444f6121a81a4f505b7e3dca70d6cd74b209fc10003" +
|
|
"78d5f2016c63acd019a1175e41fe60b88ff5e7238b32ef25243da462cabcd6c7" +
|
|
"5789c6055ef4999522acb386138f085e9bc2e9b41ecaf3bbb0990ac8b9efde0e" +
|
|
"eedff4c636bd13ef2dc18bfe5e900d88f4649ce326bc4f8e9bfe058832a595e3" +
|
|
"5c65415ca9606b0d2c705519eb83995a6da302f53e57a93f2be20dc858d3d5e9" +
|
|
"e8fdbc10af092b47c108d2e44eed00879626389b35df014e54ea3bf067d2d800" +
|
|
"b74f67c3576d585e6fedf9634e1ae7941d0de0faed7c76e0296d701728792bf4" +
|
|
"9bf007738d9273af8981bd71ed4a6360c08a4c5ab83ee337141c37679cf5db7a" +
|
|
"5aff7353ed6285bab948cac12559ee6ed9f34ee20e01b538975e26c310a33790" +
|
|
"f8be9fbb907f2585f55d2a456c6be4e46e08edd3aa5392d1c9415a6ded826776" +
|
|
"b04a3804f9b5f078888320ee5b279a4bba3b5c73ae1e8444b9320b92eb6b8e16" +
|
|
"75f505bcf79ff0e0cc80326e9bedbc6baebce47725aef3914e4326b924984788" +
|
|
"1d21d59d71b08ba34283f5784deeeecb9f4a3cfbcb21e48e8a9a94972ee7366e" +
|
|
"04d1d9c60534fdb7bfe5ec559427b6bbe96d41f551dde0800684226920cbc4f4" +
|
|
"1f3a7225e0c6a15d3ebee4e87ae4c40fef4d2e5272bb5b0037030665ae1faba7" +
|
|
"4c41a04277bbe1851e090c8d31e48575bbc96618e3cfeea5a2f80fc1e565adc8" +
|
|
"ffd84b803877ff9b305a4da59e6f707b3dbe95f7c037fbec303e302130090605" +
|
|
"2b0e03021a05000414adb4dd32f3ce248ec62e2fd45835255c2316739e041441" +
|
|
"f87d07019980ef69b635f06017567e36aa3d8802030186a0";
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
if (args.length > 0 && args[0].equals("reenc")) {
|
|
reEncodeWithPBES2();
|
|
} else {
|
|
test();
|
|
}
|
|
}
|
|
|
|
private static void test() throws Exception {
|
|
byte[] p12 = new byte[P12_FILE.length() / 2];
|
|
for (int i = 0; i < p12.length; i++) {
|
|
p12[i] = Integer.valueOf(P12_FILE.substring(2 * i, 2 * i + 2), 16)
|
|
.byteValue();
|
|
}
|
|
KeyStore ks = KeyStore.getInstance("pkcs12");
|
|
ks.load(new ByteArrayInputStream(p12), PASS);
|
|
System.out.println(ks.getKey("a", PASS));
|
|
}
|
|
|
|
private static void reEncodeWithPBES2() throws Exception {
|
|
KeyStore keyStore = KeyStore.getInstance(new File("ks"), PASS);
|
|
KeyStore.PrivateKeyEntry privateKeyEntry = new KeyStore.PrivateKeyEntry(
|
|
(PrivateKey)keyStore.getKey("a", PASS),
|
|
new Certificate[] { keyStore.getCertificate("a") });
|
|
keyStore.setEntry("a", privateKeyEntry, new KeyStore.PasswordProtection(
|
|
PASS, "PBEWithHmacSHA512AndAES_256",
|
|
new PBEParameterSpec(new byte[20], 100_000)));
|
|
ByteArrayOutputStream bout = new ByteArrayOutputStream();
|
|
keyStore.store(bout, PASS);
|
|
byte[] p12 = bout.toByteArray();
|
|
StringBuilder sb = new StringBuilder();
|
|
for (int i = 0; i < p12.length; i++) {
|
|
if (i % 32 == 0) {
|
|
if (i != 0) {
|
|
sb.append("\" +\n");
|
|
}
|
|
sb.append("\"");
|
|
}
|
|
sb.append(String.format("%02x", p12[i] & 0xff));
|
|
}
|
|
sb.append("\";\n");
|
|
System.out.println(sb.toString());
|
|
}
|
|
}
|