527399b98c
Reviewed-by: alanb, chegar, dsamersoff, weijun
241 lines
8.0 KiB
Java
241 lines
8.0 KiB
Java
/*
|
|
* Copyright (c) 2013, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
import java.net.HttpURLPermission;
|
|
/*
|
|
* Run the tests once without security manager and once with
|
|
*
|
|
* @test
|
|
* @bug 8010464
|
|
* @compile ../../../com/sun/net/httpserver/SimpleSSLContext.java
|
|
* @run main/othervm/policy=policy.1 URLTest one
|
|
* @run main/othervm URLTest one
|
|
* @run main/othervm/policy=policy.2 URLTest two
|
|
* @run main/othervm URLTest two
|
|
* @run main/othervm/policy=policy.3 URLTest three
|
|
* @run main/othervm URLTest three
|
|
*/
|
|
|
|
import java.net.*;
|
|
import java.io.*;
|
|
import java.util.*;
|
|
import java.util.concurrent.*;
|
|
import java.util.logging.*;
|
|
import com.sun.net.httpserver.*;
|
|
import javax.net.ssl.*;
|
|
|
|
public class URLTest {
|
|
static boolean failed = false;
|
|
|
|
public static void main (String[] args) throws Exception {
|
|
boolean no = false, yes = true;
|
|
|
|
if (System.getSecurityManager() == null) {
|
|
yes = false;
|
|
}
|
|
createServers();
|
|
InetSocketAddress addr1 = httpServer.getAddress();
|
|
int port1 = addr1.getPort();
|
|
InetSocketAddress addr2 = httpsServer.getAddress();
|
|
int port2 = addr2.getPort();
|
|
|
|
// each of the following cases is run with a different policy file
|
|
|
|
switch (args[0]) {
|
|
case "one":
|
|
String url1 = "http://127.0.0.1:"+ port1 + "/foo.html";
|
|
String url2 = "https://127.0.0.1:"+ port2 + "/foo.html";
|
|
String url3 = "http://127.0.0.1:"+ port1 + "/bar.html";
|
|
String url4 = "https://127.0.0.1:"+ port2 + "/bar.html";
|
|
|
|
// simple positive test. Should succceed
|
|
test(url1, "GET", "X-Foo", no);
|
|
test(url1, "GET", "Z-Bar", "X-Foo", no);
|
|
test(url1, "GET", "X-Foo", "Z-Bar", no);
|
|
test(url1, "GET", "Z-Bar", no);
|
|
test(url2, "POST", "X-Fob", no);
|
|
|
|
// reverse the methods, should fail
|
|
test(url1, "POST", "X-Foo", yes);
|
|
test(url2, "GET", "X-Fob", yes);
|
|
|
|
// different URLs, should fail
|
|
test(url3, "GET", "X-Foo", yes);
|
|
test(url4, "POST", "X-Fob", yes);
|
|
break;
|
|
|
|
case "two":
|
|
url1 = "http://127.0.0.1:"+ port1 + "/foo.html";
|
|
url2 = "https://127.0.0.1:"+ port2 + "/foo.html";
|
|
url3 = "http://127.0.0.1:"+ port1 + "/bar.html";
|
|
url4 = "https://127.0.0.1:"+ port2 + "/bar.html";
|
|
|
|
// simple positive test. Should succceed
|
|
test(url1, "GET", "X-Foo", no);
|
|
test(url2, "POST", "X-Fob", no);
|
|
test(url3, "GET", "X-Foo", no);
|
|
test(url4, "POST", "X-Fob", no);
|
|
break;
|
|
|
|
case "three":
|
|
url1 = "http://127.0.0.1:"+ port1 + "/foo.html";
|
|
url2 = "https://127.0.0.1:"+ port2 + "/a/c/d/e/foo.html";
|
|
url3 = "http://127.0.0.1:"+ port1 + "/a/b/c";
|
|
url4 = "https://127.0.0.1:"+ port2 + "/a/b/c";
|
|
|
|
test(url1, "GET", "X-Foo", yes);
|
|
test(url2, "POST", "X-Zxc", no);
|
|
test(url3, "DELETE", "Y-Foo", no);
|
|
test(url4, "POST", "Y-Foo", yes);
|
|
break;
|
|
}
|
|
shutdown();
|
|
if (failed) {
|
|
throw new RuntimeException("Test failed");
|
|
}
|
|
}
|
|
|
|
public static void test (
|
|
String u, String method,
|
|
String header, boolean exceptionExpected
|
|
)
|
|
throws Exception
|
|
{
|
|
test(u, method, header, null, exceptionExpected);
|
|
}
|
|
|
|
public static void test (
|
|
String u, String method,
|
|
String header1, String header2, boolean exceptionExpected
|
|
)
|
|
throws Exception
|
|
{
|
|
URL url = new URL(u);
|
|
System.out.println ("url=" + u + " method="+method + " header1="+header1
|
|
+" header2 = " + header2
|
|
+" exceptionExpected="+exceptionExpected);
|
|
HttpURLConnection urlc = (HttpURLConnection)url.openConnection();
|
|
if (urlc instanceof HttpsURLConnection) {
|
|
HttpsURLConnection ssl = (HttpsURLConnection)urlc;
|
|
ssl.setHostnameVerifier(new HostnameVerifier() {
|
|
public boolean verify(String host, SSLSession sess) {
|
|
return true;
|
|
}
|
|
});
|
|
ssl.setSSLSocketFactory (ctx.getSocketFactory());
|
|
}
|
|
urlc.setRequestMethod(method);
|
|
if (header1 != null) {
|
|
urlc.addRequestProperty(header1, "foo");
|
|
}
|
|
if (header2 != null) {
|
|
urlc.addRequestProperty(header2, "bar");
|
|
}
|
|
try {
|
|
int g = urlc.getResponseCode();
|
|
if (exceptionExpected) {
|
|
failed = true;
|
|
System.out.println ("FAIL");
|
|
return;
|
|
}
|
|
if (g != 200) {
|
|
String s = Integer.toString(g);
|
|
throw new RuntimeException("unexpected response "+ s);
|
|
}
|
|
InputStream is = urlc.getInputStream();
|
|
int c,count=0;
|
|
byte[] buf = new byte[1024];
|
|
while ((c=is.read(buf)) != -1) {
|
|
count += c;
|
|
}
|
|
is.close();
|
|
} catch (RuntimeException e) {
|
|
if (! (e instanceof SecurityException) &&
|
|
!(e.getCause() instanceof SecurityException) ||
|
|
!exceptionExpected)
|
|
{
|
|
System.out.println ("FAIL");
|
|
//e.printStackTrace();
|
|
failed = true;
|
|
}
|
|
}
|
|
System.out.println ("OK");
|
|
}
|
|
|
|
static HttpServer httpServer;
|
|
static HttpsServer httpsServer;
|
|
static HttpContext c, cs;
|
|
static ExecutorService e, es;
|
|
static SSLContext ctx;
|
|
|
|
// These ports need to be hard-coded until we support port number
|
|
// ranges in the permission class
|
|
|
|
static final int PORT1 = 12567;
|
|
static final int PORT2 = 12568;
|
|
|
|
static void createServers() throws Exception {
|
|
InetSocketAddress addr1 = new InetSocketAddress (PORT1);
|
|
InetSocketAddress addr2 = new InetSocketAddress (PORT2);
|
|
httpServer = HttpServer.create (addr1, 0);
|
|
httpsServer = HttpsServer.create (addr2, 0);
|
|
|
|
MyHandler h = new MyHandler();
|
|
|
|
c = httpServer.createContext ("/", h);
|
|
cs = httpsServer.createContext ("/", h);
|
|
e = Executors.newCachedThreadPool();
|
|
es = Executors.newCachedThreadPool();
|
|
httpServer.setExecutor (e);
|
|
httpsServer.setExecutor (es);
|
|
|
|
// take the keystore from elsewhere in test hierarchy
|
|
String keysdir = System.getProperty("test.src")
|
|
+ "/../../../com/sun/net/httpserver/";
|
|
ctx = new SimpleSSLContext(keysdir).get();
|
|
httpsServer.setHttpsConfigurator(new HttpsConfigurator (ctx));
|
|
|
|
httpServer.start();
|
|
httpsServer.start();
|
|
}
|
|
|
|
static void shutdown() {
|
|
httpServer.stop(1);
|
|
httpsServer.stop(1);
|
|
e.shutdown();
|
|
es.shutdown();
|
|
}
|
|
|
|
static class MyHandler implements HttpHandler {
|
|
|
|
MyHandler() {
|
|
}
|
|
|
|
public void handle(HttpExchange x) throws IOException {
|
|
x.sendResponseHeaders(200, -1);
|
|
x.close();
|
|
}
|
|
}
|
|
|
|
}
|