148 lines
7.1 KiB
Java
148 lines
7.1 KiB
Java
/*
|
|
* Copyright (c) 2001, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 4519462
|
|
* @summary Verify Sun CertPathBuilder implementation handles certificates with no extensions
|
|
*/
|
|
|
|
import java.security.cert.X509Certificate;
|
|
import java.security.cert.TrustAnchor;
|
|
import java.security.cert.CollectionCertStoreParameters;
|
|
import java.security.cert.CertStore;
|
|
import java.security.cert.X509CertSelector;
|
|
import java.security.cert.CertPathBuilder;
|
|
import java.security.cert.PKIXBuilderParameters;
|
|
import java.security.cert.CertPathBuilderResult;
|
|
import java.security.cert.CertificateFactory;
|
|
import java.security.cert.CRL;
|
|
import java.security.cert.CertPath;
|
|
import java.util.HashSet;
|
|
import java.util.ArrayList;
|
|
import java.io.ByteArrayInputStream;
|
|
|
|
// Test based on user code submitted with bug by daniel.boggs@compass.net
|
|
public class NoExtensions {
|
|
|
|
public static void main(String[] args) {
|
|
try {
|
|
NoExtensions certs = new NoExtensions();
|
|
|
|
// the first certificate has the Authority Key Identifier extension
|
|
certs.doBuild(getUserCertificate1());
|
|
System.out.println("successfully built path for the first certificate");
|
|
|
|
// the second certificate does not have the Authority Key Identifier extension
|
|
// this will not succeed
|
|
certs.doBuild(getUserCertificate2());
|
|
System.out.println("successfully built path for the second certificate");
|
|
} catch (Exception ex) {
|
|
ex.printStackTrace();
|
|
}
|
|
}
|
|
|
|
private void doBuild(X509Certificate userCert) throws Exception {
|
|
// get the set of trusted CA certificates (only one in this instance)
|
|
HashSet trustAnchors = new HashSet();
|
|
X509Certificate trustedCert = getTrustedCertificate();
|
|
trustAnchors.add(new TrustAnchor(trustedCert, null));
|
|
|
|
// put together a CertStore (repository of the certificates and CRLs)
|
|
ArrayList certs = new ArrayList();
|
|
certs.add(trustedCert);
|
|
certs.add(userCert);
|
|
CollectionCertStoreParameters certStoreParams = new CollectionCertStoreParameters(certs);
|
|
CertStore certStore = CertStore.getInstance("Collection", certStoreParams);
|
|
|
|
// specify the target certificate via a CertSelector
|
|
X509CertSelector certSelector = new X509CertSelector();
|
|
certSelector.setCertificate(userCert);
|
|
certSelector.setSubject(userCert.getSubjectDN().getName()); // seems to be required
|
|
|
|
// build a valid cerificate path
|
|
CertPathBuilder certPathBuilder = CertPathBuilder.getInstance("PKIX", "SUN");
|
|
PKIXBuilderParameters certPathBuilderParams = new PKIXBuilderParameters(trustAnchors, certSelector);
|
|
certPathBuilderParams.addCertStore(certStore);
|
|
certPathBuilderParams.setRevocationEnabled(false);
|
|
CertPathBuilderResult result = certPathBuilder.build(certPathBuilderParams);
|
|
|
|
// get and show cert path
|
|
CertPath certPath = result.getCertPath();
|
|
// System.out.println(certPath.toString());
|
|
}
|
|
|
|
private static X509Certificate getTrustedCertificate() throws Exception {
|
|
String sCert =
|
|
"-----BEGIN CERTIFICATE-----\n"
|
|
+ "MIIBezCCASWgAwIBAgIQyWD8dLUoqpJFyDxrfRlrsTANBgkqhkiG9w0BAQQFADAW\n"
|
|
+ "MRQwEgYDVQQDEwtSb290IEFnZW5jeTAeFw0wMTEwMTkxMjU5MjZaFw0zOTEyMzEy\n"
|
|
+ "MzU5NTlaMBoxGDAWBgNVBAMTD1Jvb3RDZXJ0aWZpY2F0ZTBcMA0GCSqGSIb3DQEB\n"
|
|
+ "AQUAA0sAMEgCQQC+NFKszPjatUZKWmyWaFjir1wB93FX2u5SL+GMjgUsMs1JcTKQ\n"
|
|
+ "Kh0cnnQKknNkV4cTW4NPn31YCoB1+0KA3mknAgMBAAGjSzBJMEcGA1UdAQRAMD6A\n"
|
|
+ "EBLkCS0GHR1PAI1hIdwWZGOhGDAWMRQwEgYDVQQDEwtSb290IEFnZW5jeYIQBjds\n"
|
|
+ "AKoAZIoRz7jUqlw19DANBgkqhkiG9w0BAQQFAANBACJxAfP57yqaT9N+nRgAOugM\n"
|
|
+ "JG0aN3/peCIvL3p29epRL2xoWFvxpUUlsH2I39OZ6b8+twWCebhkv1I62segXAk=\n"
|
|
+ "-----END CERTIFICATE-----";
|
|
CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
|
|
ByteArrayInputStream bytes = new ByteArrayInputStream(sCert.getBytes());
|
|
return (X509Certificate)certFactory.generateCertificate(bytes);
|
|
}
|
|
|
|
private static X509Certificate getUserCertificate1() throws Exception {
|
|
// this certificate includes an extension
|
|
String sCert =
|
|
"-----BEGIN CERTIFICATE-----\n"
|
|
+ "MIIBfzCCASmgAwIBAgIQWFSKzCWO2ptOAc2F3MKZSzANBgkqhkiG9w0BAQQFADAa\n"
|
|
+ "MRgwFgYDVQQDEw9Sb290Q2VydGlmaWNhdGUwHhcNMDExMDE5MTMwNzQxWhcNMzkx\n"
|
|
+ "MjMxMjM1OTU5WjAaMRgwFgYDVQQDEw9Vc2VyQ2VydGlmaWNhdGUwXDANBgkqhkiG\n"
|
|
+ "9w0BAQEFAANLADBIAkEA24gypa2YFGZHKznEWWbqIWNVXCM35W7RwJwhGpNsuBCj\n"
|
|
+ "NT6KEo66F+OOMgZmb0KrEZHBJASJ3n4Cqbt4aHm/2wIDAQABo0swSTBHBgNVHQEE\n"
|
|
+ "QDA+gBBch+eYzOPgVRbMq5vGpVWooRgwFjEUMBIGA1UEAxMLUm9vdCBBZ2VuY3mC\n"
|
|
+ "EMlg/HS1KKqSRcg8a30Za7EwDQYJKoZIhvcNAQEEBQADQQCYBIHBqQQJePi5Hzfo\n"
|
|
+ "CxeUaYlXmvbxVNkxM65Pplsj3h4ntfZaynmlhahH3YsnnA8wk6xPt04LjSId12RB\n"
|
|
+ "PeuO\n"
|
|
+ "-----END CERTIFICATE-----";
|
|
CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
|
|
ByteArrayInputStream bytes = new ByteArrayInputStream(sCert.getBytes());
|
|
return (X509Certificate)certFactory.generateCertificate(bytes);
|
|
}
|
|
|
|
private static X509Certificate getUserCertificate2() throws Exception {
|
|
// this certificate does not include any extensions
|
|
String sCert =
|
|
"-----BEGIN CERTIFICATE-----\n"
|
|
+ "MIIBMjCB3aADAgECAhB6225ckZVssEukPuvk1U1PMA0GCSqGSIb3DQEBBAUAMBox\n"
|
|
+ "GDAWBgNVBAMTD1Jvb3RDZXJ0aWZpY2F0ZTAeFw0wMTEwMTkxNjA5NTZaFw0wMjEw\n"
|
|
+ "MTkyMjA5NTZaMBsxGTAXBgNVBAMTEFVzZXJDZXJ0aWZpY2F0ZTIwXDANBgkqhkiG\n"
|
|
+ "9w0BAQEFAANLADBIAkEAzicGiW9aUlUoQIZnLy1l8MMV5OvA+4VJ4T/xo/PpN8Oq\n"
|
|
+ "WgZVGKeEp6JCzMlXEJk3TGLfpXL4Ytw+Ldhv0QPhLwIDAnMpMA0GCSqGSIb3DQEB\n"
|
|
+ "BAUAA0EAQmj9SFHEx66JyAps3ew4pcSS3QvfVZ/6qsNUYCG75rFGcTUPHcXKql9y\n"
|
|
+ "qBT83iNLJ//krjw5Ju0WRPg/buHSww==\n"
|
|
+ "-----END CERTIFICATE-----";
|
|
CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
|
|
ByteArrayInputStream bytes = new ByteArrayInputStream(sCert.getBytes());
|
|
return (X509Certificate)certFactory.generateCertificate(bytes);
|
|
}
|
|
}
|