138 lines
4.8 KiB
Java
138 lines
4.8 KiB
Java
/*
|
|
* Copyright (c) 2001, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/**
|
|
* @test
|
|
* @bug 4458778
|
|
* @summary verify name constraints check for min and max fields
|
|
*/
|
|
|
|
import java.io.ByteArrayOutputStream;
|
|
import java.io.File;
|
|
import java.io.FileInputStream;
|
|
import java.io.InputStream;
|
|
import java.io.IOException;
|
|
|
|
import java.security.cert.CertificateFactory;
|
|
import java.security.cert.CertPath;
|
|
import java.security.cert.CertPathValidator;
|
|
import java.security.cert.CertPathValidatorException;
|
|
import java.security.cert.CertPathValidatorResult;
|
|
import java.security.cert.PKIXParameters;
|
|
import java.security.cert.TrustAnchor;
|
|
import java.security.cert.X509Certificate;
|
|
|
|
import java.util.ArrayList;
|
|
import java.util.Collections;
|
|
import java.util.List;
|
|
import java.util.Set;
|
|
|
|
public final class VerifyNameConstraints {
|
|
|
|
private static PKIXParameters params;
|
|
private static CertPath path;
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
|
|
String[] certs = { "sun.cer", "sun2labs2.cer", "labs2isrg2.cer" };
|
|
try {
|
|
createPath(certs);
|
|
validate(path, params);
|
|
throw new Exception
|
|
("CertPath should not have been validated succesfully");
|
|
} catch (CertPathValidatorException cve) {
|
|
System.out.println("Test failed as expected: " + cve);
|
|
}
|
|
}
|
|
|
|
public static void createPath(String[] certs) throws Exception {
|
|
TrustAnchor anchor = new TrustAnchor(getCertFromFile(certs[0]), null);
|
|
List list = new ArrayList();
|
|
for (int i = 1; i < certs.length; i++) {
|
|
list.add(0, getCertFromFile(certs[i]));
|
|
}
|
|
CertificateFactory cf = CertificateFactory.getInstance("X509");
|
|
path = cf.generateCertPath(list);
|
|
|
|
Set anchors = Collections.singleton(anchor);
|
|
params = new PKIXParameters(anchors);
|
|
params.setRevocationEnabled(false);
|
|
}
|
|
|
|
/*
|
|
* Reads the entire input stream into a byte array.
|
|
*/
|
|
private static byte[] getTotalBytes(InputStream is) throws IOException {
|
|
byte[] buffer = new byte[8192];
|
|
ByteArrayOutputStream baos = new ByteArrayOutputStream(2048);
|
|
int n;
|
|
baos.reset();
|
|
while ((n = is.read(buffer, 0, buffer.length)) != -1) {
|
|
baos.write(buffer, 0, n);
|
|
}
|
|
return baos.toByteArray();
|
|
}
|
|
|
|
/**
|
|
* Get a DER-encoded X.509 certificate from a file.
|
|
*
|
|
* @param certFilePath path to file containing DER-encoded certificate
|
|
* @return X509Certificate
|
|
* @throws IOException on error
|
|
*/
|
|
public static X509Certificate getCertFromFile(String certFilePath)
|
|
throws IOException {
|
|
X509Certificate cert = null;
|
|
try {
|
|
File certFile = new File(System.getProperty("test.src", "."),
|
|
certFilePath);
|
|
FileInputStream certFileInputStream =
|
|
new FileInputStream(certFile);
|
|
CertificateFactory cf = CertificateFactory.getInstance("X509");
|
|
cert = (X509Certificate)
|
|
cf.generateCertificate(certFileInputStream);
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
throw new IOException("Can't construct X509Certificate: " +
|
|
e.getMessage());
|
|
}
|
|
return cert;
|
|
}
|
|
|
|
/**
|
|
* Perform a PKIX validation. On success, print the
|
|
* CertPathValidatorResult on System.out. On failure,
|
|
* throw an exception.
|
|
*
|
|
* @param path CertPath to validate
|
|
* @param params PKIXParameters to use in validation
|
|
* @throws Exception on error
|
|
*/
|
|
public static void validate(CertPath path, PKIXParameters params)
|
|
throws Exception {
|
|
CertPathValidator validator =
|
|
CertPathValidator.getInstance("PKIX");
|
|
CertPathValidatorResult cpvr = validator.validate(path, params);
|
|
}
|
|
}
|