jdk-24/test/jdk/java/security/KeyStore/PKCS12/KeytoolReaderP12Test.java

/*
 * Copyright (c) 2012, 2018, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

import java.io.File;
import java.io.IOException;
import java.nio.file.Files;
import java.nio.file.StandardOpenOption;
import java.util.Base64;
import jdk.test.lib.process.OutputAnalyzer;
import static java.lang.System.out;
import java.nio.file.Paths;
import java.util.List;

/**
 * @test
 * @bug 8048830
 * @summary Test for PKCS12 keystore list , export commands. Refer README for
 * keystore files information
 * @library ../
 * @library /test/lib
 * @run main KeytoolReaderP12Test
 */
public class KeytoolReaderP12Test {
    private static final String WORKING_DIRECTORY = System.getProperty(
            "test.classes", "."+ File.separator);
    //private static final String KS_PASSWD = "pass";
    private static final String KS_PASSWD = "storepass";
    private static final String CERT_CHAIN_PASSWD = "password";
    private static final String SOURCE_DIRECTORY =
            System.getProperty("test.src", "." + File.separator);

    public static void main(String[] args) throws Exception {
        List<String> expectedValues = null;
        out.println("Self signed test");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "api_private_key.p12_expected.data"));
        readTest("api_private_key.p12.data", KS_PASSWD, expectedValues);
        out.println("Self signed test Passed");

        out.println("private key with selfsigned cert, key pair not match");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "api_private_key_not_match.p12_expected.data"));
        readTest("api_private_key_not_match.p12.data", KS_PASSWD,
                expectedValues);
        out.println("private key with selfsigned cert, key pair "
                + "not match passed");

        out.println("cert chain test");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "api_cert_chain.p12_expected.data"));
        readTest("api_cert_chain.p12.data", CERT_CHAIN_PASSWD, expectedValues);
        out.println("cert chain test passed");

        out.println("IE self test");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "ie_self.pfx.pem"));
        exportTest("ie_self.pfx.data", "pkcs12testenduser1",
                KS_PASSWD, expectedValues);
        out.println("IE self test passed");

        out.println("IE chain test");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "ie_chain.pfx.pem"));
        exportTest("ie_chain.pfx.data", "servercert",
                CERT_CHAIN_PASSWD, expectedValues);
        out.println("IE chain test passed");

        out.println("Netscape self");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "netscape_self.p12.pem"));
        exportTest("netscape_self.p12.data", "pkcs12testenduser1",
                KS_PASSWD, expectedValues);
        out.println("Netscape self passed");

        out.println("Mozilla self test");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "mozilla_self.p12.pem"));
        exportTest("mozilla_self.p12.data", "pkcs12testenduser1",
                KS_PASSWD, expectedValues);
        out.println("Mozilla self test passed");

        out.println("Openssl test");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "openssl.p12.pem"));
        exportTest("openssl.p12.data", "servercert", CERT_CHAIN_PASSWD, expectedValues);
        out.println("openssl test passed");

        out.println("with different keystore and entrykey password");
        expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY,
                "api_two_pass.p12_expected.data"));
        readTest("api_two_pass.p12.data", KS_PASSWD,
                expectedValues);
        out.println("two pass test passed");
    }

    private static void readTest(String name, String password,
            List<String> expectedValues)
            throws IOException {
        convertToPFX(name);
        final String[] command = new String[]{"-debug", "-list", "-v",
            "-keystore", WORKING_DIRECTORY + File.separator + name,
            "-storetype", "pkcs12", "-storepass", password};
        runAndValidate(command, expectedValues);
    }

    private static void exportTest(String name, String alias,
            String password, List<String> expectedValues)
            throws IOException {
        convertToPFX(name);
        final String[] command = new String[]{"-debug", "-export", "-alias",
            alias, "-keystore", WORKING_DIRECTORY + File.separator + name,
            "-storepass", password, "-storetype", "pkcs12", "-rfc"};
        runAndValidate(command, expectedValues);
    }

    private static void runAndValidate(String[] command,
            List<String> expectedValues) throws IOException {
        OutputAnalyzer output = Utils.executeKeytoolCommand(command);
        if (expectedValues != null) {
            expectedValues.stream().forEach(line -> {
                output.shouldContain(line);
            });
        }
    }

    /**
     * Decodes the base64 encoded keystore and writes into new file
     * @param name base64 encoded keystore name
     */
    private static void convertToPFX(String name) throws IOException{
        File base64File = new File(SOURCE_DIRECTORY, name);
        File pkcs12File = new File(WORKING_DIRECTORY, name);
        byte[] input = Files.readAllBytes(base64File.toPath());
        Files.write(pkcs12File.toPath(), Base64.getMimeDecoder().
                decode(input), StandardOpenOption.CREATE);
    }
}