110 lines
4.2 KiB
Java
110 lines
4.2 KiB
Java
/*
|
|
* Copyright (c) 2014, 2019, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 8023197
|
|
* @summary Pre-configured command line options for keytool and jarsigner
|
|
* @library /test/lib
|
|
*/
|
|
|
|
import jdk.test.lib.SecurityTools;
|
|
import jdk.test.lib.process.OutputAnalyzer;
|
|
import jdk.test.lib.process.ProcessTools;
|
|
|
|
import java.nio.file.Files;
|
|
import java.nio.file.Path;
|
|
import java.util.List;
|
|
|
|
public class DefaultOptions {
|
|
|
|
public static void main(String[] args) throws Throwable {
|
|
|
|
Files.write(Path.of("kt.conf"), List.of(
|
|
"# A Pre-configured options file",
|
|
"keytool.all = -storepass:env PASS -keypass:env PASS "
|
|
+ "-keystore ${user.dir}/ks -debug",
|
|
"keytool.genkey = -keyalg ec -ext bc",
|
|
"keytool.delete = -keystore nothing"));
|
|
|
|
// kt.conf is read
|
|
keytool("-conf kt.conf -genkeypair -dname CN=A -alias a")
|
|
.shouldHaveExitValue(0);
|
|
keytool("-conf kt.conf -list -alias a -v")
|
|
.shouldHaveExitValue(0)
|
|
.shouldMatch("Signature algorithm name.*ECDSA")
|
|
.shouldContain("BasicConstraints");
|
|
|
|
// kt.conf is read, and dup multi-valued options processed as expected
|
|
keytool("-conf kt.conf -genkeypair -dname CN=B -alias b -ext ku=ds")
|
|
.shouldHaveExitValue(0);
|
|
keytool("-conf kt.conf -list -alias b -v")
|
|
.shouldHaveExitValue(0)
|
|
.shouldContain("BasicConstraints")
|
|
.shouldContain("DigitalSignature");
|
|
|
|
// Single-valued option in command section override all
|
|
keytool("-conf kt.conf -delete -alias a")
|
|
.shouldNotHaveExitValue(0);
|
|
|
|
// Single-valued option on command line overrides again
|
|
keytool("-conf kt.conf -delete -alias b -keystore ks")
|
|
.shouldHaveExitValue(0);
|
|
|
|
// Error cases
|
|
|
|
// File does not exist
|
|
keytool("-conf no-such-file -help -list")
|
|
.shouldNotHaveExitValue(0);
|
|
|
|
// Cannot have both standard name (-genkeypair) and legacy name (-genkey)
|
|
Files.write(Path.of("bad.conf"), List.of(
|
|
"keytool.all = -storepass:env PASS -keypass:env PASS -keystore ks",
|
|
"keytool.genkeypair = -keyalg rsa",
|
|
"keytool.genkey = -keyalg ec"));
|
|
|
|
keytool("-conf bad.conf -genkeypair -alias me -dname cn=me")
|
|
.shouldNotHaveExitValue(0);
|
|
|
|
// Unknown options are rejected by tool
|
|
Files.write(Path.of("bad.conf"), List.of(
|
|
"keytool.all=-unknown"));
|
|
|
|
keytool("-conf bad.conf -help -list").shouldNotHaveExitValue(0);
|
|
|
|
// System property must be present
|
|
Files.write(Path.of("bad.conf"), List.of(
|
|
"keytool.all = -keystore ${no.such.prop}"));
|
|
|
|
keytool("-conf bad.conf -help -list").shouldNotHaveExitValue(0);
|
|
}
|
|
|
|
// Run keytool with one environment variable PASS=changeit
|
|
static OutputAnalyzer keytool(String cmd) throws Throwable {
|
|
ProcessBuilder pb = SecurityTools.getProcessBuilder(
|
|
"keytool", List.of(cmd.trim().split("\\s+")));
|
|
pb.environment().put("PASS", "changeit");
|
|
return ProcessTools.executeCommand(pb);
|
|
}
|
|
}
|