129 lines
3.4 KiB
Bash
129 lines
3.4 KiB
Bash
#!/bin/sh
|
|
|
|
#
|
|
# Copyright (c) 2007, Oracle and/or its affiliates. All rights reserved.
|
|
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
#
|
|
# This code is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License version 2 only, as
|
|
# published by the Free Software Foundation.
|
|
#
|
|
# This code is distributed in the hope that it will be useful, but WITHOUT
|
|
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
# version 2 for more details (a copy is included in the LICENSE file that
|
|
# accompanied this code).
|
|
#
|
|
# You should have received a copy of the GNU General Public License version
|
|
# 2 along with this work; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
#
|
|
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
# or visit www.oracle.com if you need additional information or have any
|
|
# questions.
|
|
#
|
|
|
|
|
|
# @test
|
|
# @bug 6557093
|
|
# @summary Check SSL config file permission for out-of-the-box management
|
|
#
|
|
# @run shell SSLConfigFilePermissionTest.sh
|
|
|
|
createJavaFile()
|
|
{
|
|
cat << EOF > $1/$2.java
|
|
class $2 {
|
|
public static void main(String[] args) {
|
|
System.out.println("Inside main method...");
|
|
}
|
|
}
|
|
EOF
|
|
}
|
|
|
|
createManagementConfigFile() {
|
|
cat << EOF > $1
|
|
# management.properties
|
|
com.sun.management.jmxremote.authenticate=false
|
|
com.sun.management.jmxremote.ssl.config.file=$2
|
|
EOF
|
|
}
|
|
|
|
createSSLConfigFile() {
|
|
if [ -f "$1" ] ; then
|
|
rm -f $1 || echo WARNING: $1 already exists - unable to remove old copy
|
|
fi
|
|
cat << EOF > $1
|
|
javax.net.ssl.keyStore=$2
|
|
javax.net.ssl.keyStorePassword=password
|
|
EOF
|
|
}
|
|
|
|
# Check we are run from jtreg
|
|
if [ -z "${TESTCLASSES}" ]; then
|
|
echo "Test is designed to be run from jtreg only"
|
|
exit 0
|
|
fi
|
|
|
|
# Test not suitable for Windows as chmod may not be able to
|
|
# security the password file.
|
|
|
|
os=`uname -s`
|
|
if [ "$os" != "Linux" -a "$os" != "SunOS" ]; then
|
|
echo "Test not designed to run on this operating system, skipping..."
|
|
exit 0
|
|
fi
|
|
|
|
# Create management and SSL configuration files
|
|
|
|
LIBDIR=${TESTCLASSES}/lib
|
|
MGMT=${LIBDIR}/management.properties
|
|
SSL=${LIBDIR}/jmxremote.ssl.config
|
|
rm -f ${MGMT}
|
|
rm -f ${SSL}
|
|
mkdir ${LIBDIR} 2>&1
|
|
createJavaFile ${TESTCLASSES} Dummy
|
|
createManagementConfigFile ${MGMT} ${SSL}
|
|
createSSLConfigFile ${SSL} ${TESTSRC}/ssl/keystore
|
|
|
|
# Compile test
|
|
|
|
${COMPILEJAVA}/bin/javac ${TESTJAVACOPTS} ${TESTTOOLVMOPTS} -d ${TESTCLASSES} ${TESTCLASSES}/Dummy.java
|
|
|
|
JAVA=${TESTJAVA}/bin/java
|
|
CLASSPATH=${TESTCLASSES}
|
|
export CLASSPATH
|
|
|
|
failures=0
|
|
|
|
mp=-Dcom.sun.management.config.file=${MGMT}
|
|
pp=-Dcom.sun.management.jmxremote.port=4999
|
|
|
|
go() {
|
|
echo ''
|
|
sh -xc "$JAVA ${TESTVMOPTS} $1 $2 $3 $4 $5 $6 $7 $8" 2>&1
|
|
if [ $? != 0 ]; then failures=`expr $failures + 1`; fi
|
|
}
|
|
|
|
# Test 1 - SSL config file is secure - VM should start
|
|
chmod 700 ${SSL}
|
|
sh -xc "$JAVA ${TESTVMOPTS} $mp $pp Dummy" 2>&1
|
|
if [ $? != 0 ]; then failures=`expr $failures + 1`; fi
|
|
|
|
# Test 2 - SSL config file is not secure - VM should fail to start
|
|
chmod o+rx ${SSL}
|
|
sh -xc "$JAVA ${TESTVMOPTS} $mp $pp Dummy" 2>&1
|
|
if [ $? = 0 ]; then failures=`expr $failures + 1`; fi
|
|
|
|
# Reset the file permissions on the generated SSL config file
|
|
chmod 777 ${SSL}
|
|
|
|
#
|
|
# Results
|
|
#
|
|
echo ''
|
|
if [ $failures -gt 0 ];
|
|
then echo "$failures test(s) failed";
|
|
else echo "All test(s) passed"; fi
|
|
exit $failures
|