author | erikj |
Tue, 12 Sep 2017 19:03:39 +0200 | |
changeset 47216 | 71c04702a3d5 |
parent 45467 | jdk/test/sun/security/tools/jarsigner/warnings/AliasNotInStoreTest.java@99c87a16a8e4 |
child 48893 | 454518b338b0 |
permissions | -rw-r--r-- |
28662 | 1 |
/* |
45287
e0bb5f83e17a
8180888: move jdk.testlibrary.JarUtils to the top level testlibrary
iignatyev
parents:
40262
diff
changeset
|
2 |
* Copyright (c) 2013, 2017, Oracle and/or its affiliates. All rights reserved. |
28662 | 3 |
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
4 |
* |
|
5 |
* This code is free software; you can redistribute it and/or modify it |
|
6 |
* under the terms of the GNU General Public License version 2 only, as |
|
7 |
* published by the Free Software Foundation. |
|
8 |
* |
|
9 |
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
10 |
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
11 |
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
12 |
* version 2 for more details (a copy is included in the LICENSE file that |
|
13 |
* accompanied this code). |
|
14 |
* |
|
15 |
* You should have received a copy of the GNU General Public License version |
|
16 |
* 2 along with this work; if not, write to the Free Software Foundation, |
|
17 |
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
18 |
* |
|
19 |
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
|
20 |
* or visit www.oracle.com if you need additional information or have any |
|
21 |
* questions. |
|
22 |
*/ |
|
23 |
||
24 |
import jdk.testlibrary.OutputAnalyzer; |
|
45287
e0bb5f83e17a
8180888: move jdk.testlibrary.JarUtils to the top level testlibrary
iignatyev
parents:
40262
diff
changeset
|
25 |
import jdk.test.lib.util.JarUtils; |
28662 | 26 |
|
27 |
/** |
|
28 |
* @test |
|
29 |
* @bug 8024302 8026037 |
|
30 |
* @summary Test for aliasNotInStore warning |
|
45287
e0bb5f83e17a
8180888: move jdk.testlibrary.JarUtils to the top level testlibrary
iignatyev
parents:
40262
diff
changeset
|
31 |
* @library /lib/testlibrary /test/lib ../ |
45467
99c87a16a8e4
8181761: add explicit @build actions for jdk.test.lib classes in all :tier2 tests
iignatyev
parents:
45287
diff
changeset
|
32 |
* @build jdk.test.lib.util.JarUtils |
28662 | 33 |
* @run main AliasNotInStoreTest |
34 |
*/ |
|
35 |
public class AliasNotInStoreTest extends Test { |
|
36 |
||
37 |
/** |
|
38 |
* The test signs and verifies a jar that contains signed entries |
|
39 |
* that are not signed by any alias in keystore (aliasNotInStore). |
|
40 |
* Warning message is expected. |
|
41 |
*/ |
|
42 |
public static void main(String[] args) throws Throwable { |
|
43 |
AliasNotInStoreTest test = new AliasNotInStoreTest(); |
|
44 |
test.start(); |
|
45 |
} |
|
46 |
||
47 |
private void start() throws Throwable { |
|
48 |
Utils.createFiles(FIRST_FILE, SECOND_FILE); |
|
49 |
System.out.println(String.format("Create a %s that contains %s", |
|
50 |
new Object[]{UNSIGNED_JARFILE, FIRST_FILE})); |
|
51 |
JarUtils.createJar(UNSIGNED_JARFILE, FIRST_FILE); |
|
52 |
||
53 |
// create first key pair for signing |
|
40262 | 54 |
keytool( |
28662 | 55 |
"-genkey", |
56 |
"-alias", FIRST_KEY_ALIAS, |
|
57 |
"-keyalg", KEY_ALG, |
|
58 |
"-keysize", Integer.toString(KEY_SIZE), |
|
59 |
"-keystore", BOTH_KEYS_KEYSTORE, |
|
60 |
"-storepass", PASSWORD, |
|
61 |
"-keypass", PASSWORD, |
|
62 |
"-dname", "CN=First", |
|
63 |
"-validity", Integer.toString(VALIDITY)).shouldHaveExitValue(0); |
|
64 |
||
65 |
// create second key pair for signing |
|
40262 | 66 |
keytool( |
28662 | 67 |
"-genkey", |
68 |
"-alias", SECOND_KEY_ALIAS, |
|
69 |
"-keyalg", KEY_ALG, |
|
70 |
"-keysize", Integer.toString(KEY_SIZE), |
|
71 |
"-keystore", BOTH_KEYS_KEYSTORE, |
|
72 |
"-storepass", PASSWORD, |
|
73 |
"-keypass", PASSWORD, |
|
74 |
"-dname", "CN=Second", |
|
75 |
"-validity", Integer.toString(VALIDITY)).shouldHaveExitValue(0); |
|
76 |
||
77 |
// sign jar with first key |
|
40262 | 78 |
OutputAnalyzer analyzer = jarsigner( |
28662 | 79 |
"-keystore", BOTH_KEYS_KEYSTORE, |
80 |
"-storepass", PASSWORD, |
|
81 |
"-keypass", PASSWORD, |
|
82 |
"-signedjar", SIGNED_JARFILE, |
|
83 |
UNSIGNED_JARFILE, |
|
84 |
FIRST_KEY_ALIAS); |
|
85 |
||
86 |
checkSigning(analyzer); |
|
87 |
||
88 |
System.out.println(String.format("Copy %s to %s, and add %s", |
|
89 |
new Object[] {SIGNED_JARFILE, UPDATED_SIGNED_JARFILE, |
|
90 |
SECOND_FILE})); |
|
91 |
||
92 |
JarUtils.updateJar(SIGNED_JARFILE, UPDATED_SIGNED_JARFILE, SECOND_FILE); |
|
93 |
||
94 |
// sign jar with second key |
|
40262 | 95 |
analyzer = jarsigner( |
28662 | 96 |
"-keystore", BOTH_KEYS_KEYSTORE, |
97 |
"-storepass", PASSWORD, |
|
98 |
"-keypass", PASSWORD, |
|
99 |
UPDATED_SIGNED_JARFILE, |
|
100 |
SECOND_KEY_ALIAS); |
|
101 |
||
102 |
checkSigning(analyzer); |
|
103 |
||
104 |
// create keystore that contains only first key |
|
40262 | 105 |
keytool( |
28662 | 106 |
"-importkeystore", |
107 |
"-srckeystore", BOTH_KEYS_KEYSTORE, |
|
108 |
"-srcalias", FIRST_KEY_ALIAS, |
|
109 |
"-srcstorepass", PASSWORD, |
|
110 |
"-srckeypass", PASSWORD, |
|
111 |
"-destkeystore", FIRST_KEY_KEYSTORE, |
|
112 |
"-destalias", FIRST_KEY_ALIAS, |
|
113 |
"-deststorepass", PASSWORD, |
|
114 |
"-destkeypass", PASSWORD).shouldHaveExitValue(0); |
|
115 |
||
116 |
// verify jar with keystore that contains only first key in strict mode, |
|
117 |
// so there is signed entry (FirstClass.class) that is not signed |
|
118 |
// by any alias in the keystore |
|
40262 | 119 |
analyzer = jarsigner( |
28662 | 120 |
"-verify", |
121 |
"-verbose", |
|
122 |
"-keystore", FIRST_KEY_KEYSTORE, |
|
123 |
"-storepass", PASSWORD, |
|
124 |
"-keypass", PASSWORD, |
|
125 |
UPDATED_SIGNED_JARFILE); |
|
126 |
||
127 |
checkVerifying(analyzer, 0, CHAIN_NOT_VALIDATED_VERIFYING_WARNING, |
|
128 |
ALIAS_NOT_IN_STORE_VERIFYING_WARNING); |
|
129 |
||
130 |
// verify jar with keystore that contains only first key in strict mode |
|
40262 | 131 |
analyzer = jarsigner( |
28662 | 132 |
"-verify", |
133 |
"-verbose", |
|
134 |
"-strict", |
|
135 |
"-keystore", FIRST_KEY_KEYSTORE, |
|
136 |
"-storepass", PASSWORD, |
|
137 |
"-keypass", PASSWORD, |
|
138 |
UPDATED_SIGNED_JARFILE); |
|
139 |
||
140 |
int expectedExitCode = ALIAS_NOT_IN_STORE_EXIT_CODE |
|
141 |
+ CHAIN_NOT_VALIDATED_EXIT_CODE; |
|
142 |
checkVerifying(analyzer, expectedExitCode, |
|
143 |
CHAIN_NOT_VALIDATED_VERIFYING_WARNING, |
|
144 |
ALIAS_NOT_IN_STORE_VERIFYING_WARNING); |
|
145 |
||
146 |
System.out.println("Test passed"); |
|
147 |
} |
|
148 |
||
149 |
} |