jdk-sandbox: test/jdk/javax/net/ssl/etc/README@71c04702a3d5 (annotated)

38380 24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	1	Keystores used for the JSSE regression test suite.
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	2
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	3	keystore
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	4	truststore
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	5	==========
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	6
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	7	These are the primary two keystores and contain entries for testing most
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	8	of the JSSE regression test files. There are three entries, one RSA-based,
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	9	one DSA-based and one EC-based. If they expire, simply recreate them
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	10	using keytool and most of the test cases should work.
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	11
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	12	The password on both files is:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	13
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	14	passphrase
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	15
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	16	There are no individual key entry passwords at this time.
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	17
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	18
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	19	keystore entries
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	20	================
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	21
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	22	Alias name: dummy
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	23	-----------------
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	24	Creation date: May 16, 2016
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	25	Entry type: PrivateKeyEntry
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	26	Certificate chain length: 1
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	27	Certificate[1]:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	28	Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	29	Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	30	Serial number: 57399b87
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	31	Valid from: Mon May 16 10:06:38 UTC 2016 until: Sat May 16 10:06:38 UTC 2026
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	32	Signature algorithm name: SHA256withRSA
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	33	Version: 1
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	34
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	35	This can be generated using hacked (update the keytool source code so that
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	36	it can be used for version 1 X.509 certificate) keytool command:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	37	% keytool -genkeypair -alias dummy -keyalg RSA -keysize 2048 \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	38	-sigalg SHA256withRSA \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	39	-dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	40	-validity 3652 -keypass passphrase -keystore keystore -storepass passphrase
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	41
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	42
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	43	Alias name: dummyecdsa
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	44	----------------------
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	45	Creation date: May 16, 2016
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	46	Entry type: PrivateKeyEntry
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	47	Certificate chain length: 1
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	48	Certificate[1]:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	49	Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	50	Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	51	Serial number: 57399c1d
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	52	Valid from: Mon May 16 10:09:01 UTC 2016 until: Sat May 16 10:09:01 UTC 2026
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	53	Signature algorithm name: SHA256withECDSA
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	54	Version: 1
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	55
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	56	This can be generated using hacked (update the keytool source code so that
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	57	it can be used for version 1 X.509 certificate) keytool command:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	58	% keytool -genkeypair -alias dummy -keyalg EC -keysize 256 \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	59	-sigalg SHA256withECDSA \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	60	-dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	61	-validity 3652 -keypass passphrase -keystore keystore -storepass passphrase
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	62
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	63	Alias name: dummydsa
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	64	--------------------
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	65	Creation date: Mar 11, 2007
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	66	Entry type: PrivateKeyEntry
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	67	Certificate chain length: 1
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	68	Certificate[1]:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	69	Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	70	Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	71	Serial number: 45f3a314
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	72	Valid from: Sun Mar 11 06:35:00 UTC 2007 until: Wed Mar 08 06:35:00 UTC 2017
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	73	Certificate fingerprints:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	74	Signature algorithm name: SHA1withDSA
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	75	Version: 1
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	76
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	77	This can be generated using hacked (update the keytool source code so that
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	78	it can be used for version 1 X.509 certificate) keytool command:
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	79	% keytool -genkeypair -alias dummy -keyalg DSA -keysize 1024 \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	80	-sigalg SHA1withDSA \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	81	-dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	82	-validity 3652 -keypass passphrase -keystore keystore -storepass passphrase
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	83
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	84
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	85	truststore entries
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	86	==================
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	87	This key store contains only trusted certificate entries. The same
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	88	certificates are used in both keystore and truststore.
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	89
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	90
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	91	unknown_keystore
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	92	================
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	93	A keystore you can use when you don't want things to be verified.
24e6bb1a50ac 8157035: Use stronger algorithms and keys for JSSE testing xuelei parents: diff changeset	94	Use this with keystore/truststore, and you'll never get a match.

author	erikj
	Tue, 12 Sep 2017 19:03:39 +0200
changeset 47216	71c04702a3d5
parent 38380	jdk/test/javax/net/ssl/etc/README@24e6bb1a50ac
child 47470	359c604930af
permissions	-rw-r--r--