122 lines
4.9 KiB
Java
122 lines
4.9 KiB
Java
/*
|
|
* Copyright (c) 2015, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation. Oracle designates this
|
|
* particular file as subject to the "Classpath" exception as provided
|
|
* by Oracle in the LICENSE file that accompanied this code.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
import java.io.ByteArrayInputStream;
|
|
import java.io.File;
|
|
import java.security.KeyFactory;
|
|
import java.security.PublicKey;
|
|
import java.security.spec.X509EncodedKeySpec;
|
|
import java.util.Base64;
|
|
import javax.xml.XMLConstants;
|
|
import javax.xml.crypto.Data;
|
|
import javax.xml.crypto.KeySelector;
|
|
import javax.xml.crypto.OctetStreamData;
|
|
import javax.xml.crypto.URIDereferencer;
|
|
import javax.xml.crypto.URIReference;
|
|
import javax.xml.crypto.URIReferenceException;
|
|
import javax.xml.crypto.XMLCryptoContext;
|
|
import javax.xml.crypto.dsig.XMLSignature;
|
|
import javax.xml.crypto.dsig.XMLSignatureFactory;
|
|
import javax.xml.crypto.dsig.dom.DOMValidateContext;
|
|
import javax.xml.parsers.DocumentBuilderFactory;
|
|
import org.w3c.dom.Document;
|
|
import org.w3c.dom.Element;
|
|
import org.w3c.dom.NodeList;
|
|
|
|
/**
|
|
* @test
|
|
* @bug 8079140
|
|
* @summary Check if IgnoreAllErrorHandler doesn't require additional permission
|
|
* @run main/othervm/java.security.policy=ErrorHandlerPermissions.policy
|
|
* ErrorHandlerPermissions
|
|
*/
|
|
public class ErrorHandlerPermissions {
|
|
|
|
private final static String FS = System.getProperty("file.separator");
|
|
private final static String DIR = System.getProperty("test.src", ".");
|
|
private final static String DATA_DIR = DIR + FS + "data";
|
|
private final static String SIGNATURE = DATA_DIR + FS +
|
|
"signature-external-rsa.xml";
|
|
|
|
private static final String validationKey =
|
|
"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnx4TdvPSA5vcsPi0OJZi9Ox0Z" +
|
|
"2FRz2oeUCtuWoyEg0kUCeFd+jJZMstDJUiZNSOeuCO3FWSpdJgAwI4zlveHvuU/o" +
|
|
"qHSa1eYTObOCvxfVYGGflWsSvGXyiANtRWVUrYODBeyL+2pWxDYh+Fi5EKizPfTG" +
|
|
"wRjBVRSkRZKTnSjnQwIDAQAB";
|
|
|
|
private static final URIDereferencer dereferencer =
|
|
new DummyURIDereferencer();
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
|
|
dbf.setNamespaceAware(true);
|
|
dbf.setValidating(false);
|
|
dbf.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
|
|
Document doc = dbf.newDocumentBuilder().parse(new File(SIGNATURE));
|
|
NodeList nl = doc.getElementsByTagNameNS(XMLSignature.XMLNS,
|
|
"Signature");
|
|
if (nl.getLength() == 0) {
|
|
throw new RuntimeException("Couldn't find 'Signature' element");
|
|
}
|
|
Element element = (Element) nl.item(0);
|
|
|
|
byte[] keyBytes = Base64.getDecoder().decode(validationKey);
|
|
X509EncodedKeySpec spec = new X509EncodedKeySpec(keyBytes);
|
|
KeyFactory kf = KeyFactory.getInstance("RSA");
|
|
PublicKey key = kf.generatePublic(spec);
|
|
KeySelector ks = KeySelector.singletonKeySelector(key);
|
|
|
|
DOMValidateContext vc = new DOMValidateContext(ks, element);
|
|
|
|
// disable secure validation mode
|
|
vc.setProperty("org.jcp.xml.dsig.secureValidation", Boolean.FALSE);
|
|
|
|
// set a dummy dereferencer to be able to get content by references
|
|
vc.setURIDereferencer(dereferencer);
|
|
|
|
XMLSignatureFactory factory = XMLSignatureFactory.getInstance();
|
|
XMLSignature signature = factory.unmarshalXMLSignature(vc);
|
|
|
|
// run validation
|
|
signature.validate(vc);
|
|
}
|
|
|
|
/**
|
|
* This URIDereferencer returns a static XML document.
|
|
*/
|
|
private static class DummyURIDereferencer implements URIDereferencer {
|
|
|
|
@Override
|
|
public Data dereference(final URIReference ref, XMLCryptoContext ctx)
|
|
throws URIReferenceException {
|
|
// return static content
|
|
return new OctetStreamData(new ByteArrayInputStream(
|
|
"<test>test</test>".getBytes()), ref.getURI(),
|
|
ref.getType());
|
|
}
|
|
}
|
|
|
|
}
|