148 lines
6.2 KiB
Java
148 lines
6.2 KiB
Java
/*
|
|
* Copyright (c) 2012, 2018, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
import java.io.File;
|
|
import java.io.IOException;
|
|
import java.security.GeneralSecurityException;
|
|
import java.security.Key;
|
|
import java.security.KeyStore;
|
|
import java.security.KeyStoreException;
|
|
import java.security.NoSuchAlgorithmException;
|
|
import java.security.PKCS12Attribute;
|
|
import java.security.PrivateKey;
|
|
import java.security.UnrecoverableEntryException;
|
|
import java.security.cert.Certificate;
|
|
import java.util.Arrays;
|
|
import java.util.Set;
|
|
import static java.lang.System.out;
|
|
import java.util.HashSet;
|
|
|
|
/**
|
|
* @test
|
|
* @bug 8048830
|
|
* @summary Test store metadata attributes to PKCS12 keystore.
|
|
* @library ../
|
|
* @library /test/lib
|
|
* @run main MetadataStoreLoadTest
|
|
*/
|
|
public class MetadataStoreLoadTest {
|
|
private static final char[] PASSWORD = "passwd".toCharArray();
|
|
private static final char[] KEY_PASSWORD = "keypasswd".toCharArray();
|
|
private static final String ALIAS = "testkey_metadata";
|
|
private static final String KEYSTORE = "ks.pkcs12";
|
|
private static final String KESTORE_NEW = "ks-attr.pkcs12";
|
|
private static final int MAX_HUGE_SIZE = 2000000;
|
|
private static final String WORKING_DIRECTORY = System.getProperty(
|
|
"test.classes", "." + File.separator);
|
|
private static final String KEYSTORE_PATH = WORKING_DIRECTORY
|
|
+ File.separator + KEYSTORE;
|
|
private static KeyStore.Entry.Attribute[] ATTR_SET;
|
|
|
|
private void runTest() throws GeneralSecurityException,
|
|
UnrecoverableEntryException, NoSuchAlgorithmException,
|
|
KeyStoreException, IOException {
|
|
storeAttrs();
|
|
checkAttrs();
|
|
}
|
|
|
|
private void storeAttrs() throws UnrecoverableEntryException,
|
|
GeneralSecurityException, NoSuchAlgorithmException,
|
|
KeyStoreException, IOException {
|
|
KeyStore ksIn = Utils.loadKeyStore(KEYSTORE_PATH,
|
|
Utils.KeyStoreType.pkcs12, PASSWORD);
|
|
KeyStore ksAttr = KeyStore
|
|
.getInstance(Utils.KeyStoreType.pkcs12.name());
|
|
ksAttr.load(null);
|
|
Key key = ksIn.getKey(ALIAS, PASSWORD);
|
|
Certificate cert = ksIn.getCertificate(ALIAS);
|
|
Set<KeyStore.Entry.Attribute> attrs =
|
|
new HashSet<>(Arrays.asList(ATTR_SET));
|
|
KeyStore.Entry e = new KeyStore.PrivateKeyEntry((PrivateKey) key,
|
|
new Certificate[]{cert}, attrs);
|
|
ksAttr.setEntry(ALIAS, e, new KeyStore.PasswordProtection(
|
|
KEY_PASSWORD));
|
|
|
|
out.println("Attributes before store:");
|
|
e.getAttributes().stream().forEach((attr) -> {
|
|
out.println(attr.getName() + ", '" + attr.getValue() + "'");
|
|
});
|
|
Utils.saveKeyStore(ksAttr, WORKING_DIRECTORY + File.separator
|
|
+ KESTORE_NEW, PASSWORD);
|
|
}
|
|
|
|
private void checkAttrs() throws UnrecoverableEntryException,
|
|
GeneralSecurityException, NoSuchAlgorithmException,
|
|
KeyStoreException, IOException {
|
|
KeyStore ks = Utils.loadKeyStore(WORKING_DIRECTORY
|
|
+ File.separator
|
|
+ KESTORE_NEW, Utils.KeyStoreType.pkcs12, PASSWORD);
|
|
KeyStore.Entry keyStoreEntry = ks.getEntry(ALIAS,
|
|
new KeyStore.PasswordProtection(KEY_PASSWORD));
|
|
out.println("Attributes after store:");
|
|
//print attribute values
|
|
keyStoreEntry.getAttributes().stream().forEach((attr) -> {
|
|
out.println(attr.getName() + ", '" + attr.getValue() + "'");
|
|
});
|
|
Arrays.stream(ATTR_SET).forEach((attr) -> {
|
|
if (!keyStoreEntry.getAttributes().contains(attr)) {
|
|
throw new RuntimeException("Entry doesn't contain attribute: ("
|
|
+ attr.getName() + ", '" + attr.getValue() + "')");
|
|
}
|
|
});
|
|
}
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
MetadataStoreLoadTest test = new MetadataStoreLoadTest();
|
|
test.setUp();
|
|
test.runTest();
|
|
out.println("Test Passed");
|
|
}
|
|
|
|
private void setUp() {
|
|
Utils.createKeyStore(Utils.KeyStoreType.pkcs12, KEYSTORE_PATH, ALIAS);
|
|
final String allCharsString = "`1234567890-=qwertyuiop[]asdfghjkl;'\\zx"
|
|
+ "cvbnm,./!@#$%^&*()_+QWERTYUIOP{}ASDFGHJKL:|>ZXCVBNM<>?\"";
|
|
StringBuilder sbPrintable = new StringBuilder();
|
|
while (sbPrintable.length() < MAX_HUGE_SIZE) {
|
|
sbPrintable.append(allCharsString);
|
|
}
|
|
final String hugePrintable = sbPrintable.toString();
|
|
final String binaryString = "00:11:22:33:44:55:66:77:88:99:AA:BB:DD:"
|
|
+ "EE:FF:";
|
|
StringBuilder sbBinary = new StringBuilder();
|
|
sbBinary.append(binaryString);
|
|
while (sbBinary.length() < MAX_HUGE_SIZE) {
|
|
sbBinary.append(":").append(binaryString);
|
|
}
|
|
sbBinary.insert(0, "[").append("]");
|
|
final String hugeBinary = sbBinary.toString();
|
|
ATTR_SET = new PKCS12Attribute[5];
|
|
ATTR_SET[0] = new PKCS12Attribute("1.2.840.113549.1.9.1",
|
|
"Test email addres attr <test@oracle.com>");
|
|
ATTR_SET[1] = new PKCS12Attribute("1.2.110.1", "not registered attr");
|
|
ATTR_SET[2] = new PKCS12Attribute("1.2.110.2", hugePrintable);
|
|
ATTR_SET[3] = new PKCS12Attribute("1.2.110.3", hugeBinary);
|
|
ATTR_SET[4] = new PKCS12Attribute("1.2.110.2", " ");
|
|
}
|
|
}
|