/*

 * Copyright (c) 2013, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

/*

 * @test

 * @bug 8005389

 * @summary CRL Distribution Point URIs with spaces or backslashes should

 *          not be parseable

 * @modules java.base/sun.security.util

 *          java.base/sun.security.x509

 */

import java.io.ByteArrayInputStream;

import java.io.IOException;

import java.security.cert.CertificateFactory;

import java.security.cert.X509Certificate;

import sun.security.util.DerValue;

import sun.security.x509.CRLDistributionPointsExtension;

import sun.security.x509.URIName;

public class Parse {

    // certificate with a space in the CRLDistributionPointsExtension uri

    // uri: file://crl file.crl

    static String certWithSpaceInCDPStr =

        "-----BEGIN CERTIFICATE-----\n" +

        "MIIB8DCCAVmgAwIBAgIJAOgNnYA5nHtQMA0GCSqGSIb3DQEBBQUAMCUxETAPBgNV\n" +

        "BAMTCHRlc3RuYW1lMRAwDgYDVQQLEwd0ZXN0b3JnMB4XDTEyMDgxMzIzMzgzN1oX\n" +

        "DTEyMDkxMjIzMzgzN1owJTERMA8GA1UEAxMIdGVzdG5hbWUxEDAOBgNVBAsTB3Rl\n" +

        "c3RvcmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANx02RuD/Y2pvgVnXBbJ\n" +

        "Sb+8j80geuoYEyRRnP6YiL2wmZqMmTHuznFwosO57KoVbz/XEr1bOnBMnPKax5Ll\n" +

        "QlDI3nmnxmUq13ORQ6GkD3M+QRzzxc66BFJbKqUzgv1P3NngyIFr03zb/opXdCTZ\n" +

        "4WfJuCf7Ouz44Ch6ZGQJ+7G5AgMBAAGjKDAmMCQGA1UdHwQdMBswGaAXoBWGE2Zp\n" +

        "bGU6Ly9jcmwgZmlsZS5jcmwwDQYJKoZIhvcNAQEFBQADgYEAB+ublc1l1EnXtEJE\n" +

        "jYeFzAdttHKQ4mn8CXGtHSy9gpckKyLdZUc9/n6yKuNXih29faepZ8mtaftTYpgR\n" +

        "AUqZ+6YYik+rIqZpnWMPR9qZvshf/KPerXiZe7kYBKNvxgmCFfhK8QN6nxUGrR2F\n" +

        "d53HWct6zXqlj+vQZsGC30f764M=\n" +

        "-----END CERTIFICATE-----";

    // a certificate with backslashes in the CRLDistributionPointsExtension uri

    // uri: file://\\\\CRL\\crl_file.crl

    static String certWithBackslashesInCDPStr =

        "-----BEGIN CERTIFICATE-----\n" +

        "MIIB9jCCAV+gAwIBAgIJAOQV9wTIgnc1MA0GCSqGSIb3DQEBBQUAMCUxETAPBgNV\n" +

        "BAMTCHRlc3RuYW1lMRAwDgYDVQQLEwd0ZXN0b3JnMB4XDTEyMDgxMzIzMzcxM1oX\n" +

        "DTEyMDkxMjIzMzcxM1owJTERMA8GA1UEAxMIdGVzdG5hbWUxEDAOBgNVBAsTB3Rl\n" +

        "c3RvcmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALdtczqZqI6RI17mz58/\n" +

        "PgFNBmb/dX/MeVcuaUp79RVUbDQ68z4JxDNv4ImcAxigKXb2jObPAxOdM+VlXROS\n" +

        "AmUNgYrIPuHNnKbd+rwilc6DsGWZnZLmZE63fUvTSqjOnSlsENSgDBVL/4r+yWBB\n" +

        "8KKmFGRFqkCyN1EZl03IW9i7AgMBAAGjLjAsMCoGA1UdHwQjMCEwH6AdoBuGGWZp\n" +

        "bGU6Ly9cXENSTFxjcmxfZmlsZS5jcmwwDQYJKoZIhvcNAQEFBQADgYEACOgZEaST\n" +

        "BCFQVeXZ5d8J3dUZ+wRRkPvrlvopxMtZb3Hyte78PNoIZ78f1gYL18HiGYwKttau\n" +

        "DyPp1lrG9xKPfIeKg+aDWTtVE7pexB4qCryID0+kJfdNzkdIgdGJzJ/RmfJ5heMF\n" +

        "+R46Mhpua4c6gGsE2NGBFxmtS3YHpQsKtz8=\n" +

        "-----END CERTIFICATE-----";

    /*

     * Create an X509Certificate then attempt to construct a

     * CRLDistributionPointsExtension object from its extension value bytes.

     */

    private static void CRLDistributionPointsExtensionTest(String certStr)

            throws Exception {

        CertificateFactory cf = CertificateFactory.getInstance("X.509");

        ByteArrayInputStream is = new ByteArrayInputStream(certStr.getBytes());

        X509Certificate cert = (X509Certificate) cf.generateCertificate(is);

        // oid for CRL Distribution Points = 2.5.29.31

        byte[] CDPExtBytes = cert.getExtensionValue("2.5.29.31");

        DerValue val = new DerValue(CDPExtBytes);

        byte[] data = val.getOctetString();

        CRLDistributionPointsExtension CDPExt

                = new CRLDistributionPointsExtension(false, data);

    }

    public static void main(String[] args) throws Exception {

        /* Try to parse a CRLDistributionPointsExtension URI with a space. */

        try {

            CRLDistributionPointsExtensionTest(certWithSpaceInCDPStr);

            throw new RuntimeException("Illegally parsed a "

                    + "CRLDistributionPointsExtension uri with a space.");

        } catch (IOException e) {

            System.out.println("Caught the correct exception.");

        }

        /* Try to parse a CRLDistributionPointsExtension URI with backslashes. */

        try {

            CRLDistributionPointsExtensionTest(certWithBackslashesInCDPStr);

            throw new RuntimeException("Illegally parsed a "

                    + "CRLDistributionPointsExtension uri with a backslashes.");

        } catch (IOException e) {

            System.out.println("Caught the correct exception.");

        }

        /* Try to construct a URIName from a uri with a space. */

        String uriWithSpace = "file://crl file.crl";

        URIName name;

        try {

            name = new URIName(uriWithSpace);

            throw new RuntimeException("Illegally created a URIName "

                    + "from a uri with a space.");

        } catch (IOException e) {

            System.out.println("Caught the correct exception.");

        }

        /* Try to construct a URIName from a uri with backslashes. */

        String uriWithBackslashes = "file://\\\\CRL\\crl_file.crl";

        try {

            name = new URIName(uriWithBackslashes);

            throw new RuntimeException("Illegally created a URIName "

                    + "from a uri with backslashes.");

        } catch (IOException e) {

            System.out.println("Caught the correct exception.");

        }

        System.out.println("Tests passed.");

    }

}