697f27c5d5
Reviewed-by: mullan, ascarpino
72 lines
2.6 KiB
Java
72 lines
2.6 KiB
Java
/*
|
|
* Copyright (c) 2024, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 8341964
|
|
* @summary Add mechanism to disable different parts of TLS cipher suite
|
|
* @run testng/othervm TLSCipherSuiteWildCardMatchingIllegalArgument
|
|
*/
|
|
|
|
import static org.testng.AssertJUnit.assertEquals;
|
|
import static org.testng.AssertJUnit.fail;
|
|
|
|
import org.testng.annotations.BeforeTest;
|
|
import org.testng.annotations.Test;
|
|
|
|
import java.security.Security;
|
|
|
|
import javax.net.ssl.SSLContext;
|
|
|
|
/**
|
|
* SSLContext loads "jdk.tls.disabledAlgorithms" system property statically
|
|
* when it's being loaded into memory, so we can't call
|
|
* Security.setProperty("jdk.tls.disabledAlgorithms") more than once per test
|
|
* class. Thus, we need a separate test class each time we need to modify
|
|
* "jdk.tls.disabledAlgorithms" config value for testing.
|
|
*/
|
|
public class TLSCipherSuiteWildCardMatchingIllegalArgument {
|
|
|
|
private static final String SECURITY_PROPERTY =
|
|
"jdk.tls.disabledAlgorithms";
|
|
private static final String TEST_ALGORITHMS = "ECDHE_*_WITH_AES_256_GCM_*";
|
|
|
|
@BeforeTest
|
|
void setUp() throws Exception {
|
|
Security.setProperty(SECURITY_PROPERTY, TEST_ALGORITHMS);
|
|
}
|
|
|
|
@Test
|
|
public void testChainedBefore() throws Exception {
|
|
try {
|
|
SSLContext.getInstance("TLS");
|
|
fail("No IllegalArgumentException was thrown");
|
|
} catch (ExceptionInInitializerError e) {
|
|
assertEquals(IllegalArgumentException.class,
|
|
e.getCause().getClass());
|
|
assertEquals("Wildcard pattern must start with \"TLS_\"",
|
|
e.getCause().getMessage());
|
|
}
|
|
}
|
|
}
|