author | jjiang |
Wed, 15 Aug 2018 18:41:18 +0800 | |
changeset 51460 | 97e361fe3433 |
parent 47216 | 71c04702a3d5 |
permissions | -rw-r--r-- |
2 | 1 |
/* |
51460
97e361fe3433
8164639: Configure PKCS11 tests to use user-supplied NSS libraries
jjiang
parents:
47216
diff
changeset
|
2 |
* Copyright (c) 2002, 2018, Oracle and/or its affiliates. All rights reserved. |
2 | 3 |
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
4 |
* |
|
5 |
* This code is free software; you can redistribute it and/or modify it |
|
6 |
* under the terms of the GNU General Public License version 2 only, as |
|
7 |
* published by the Free Software Foundation. |
|
8 |
* |
|
9 |
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
10 |
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
11 |
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
12 |
* version 2 for more details (a copy is included in the LICENSE file that |
|
13 |
* accompanied this code). |
|
14 |
* |
|
15 |
* You should have received a copy of the GNU General Public License version |
|
16 |
* 2 along with this work; if not, write to the Free Software Foundation, |
|
17 |
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
18 |
* |
|
5506 | 19 |
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
20 |
* or visit www.oracle.com if you need additional information or have any |
|
21 |
* questions. |
|
2 | 22 |
*/ |
23 |
||
24 |
/* |
|
25 |
* @test |
|
23733
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
26 |
* @bug 6313675 6323647 8028192 |
2 | 27 |
* @summary Verify that all ciphersuites work in FIPS mode |
51460
97e361fe3433
8164639: Configure PKCS11 tests to use user-supplied NSS libraries
jjiang
parents:
47216
diff
changeset
|
28 |
* @library /test/lib .. |
2 | 29 |
* @author Andreas Sterbenz |
30820 | 30 |
* @modules java.base/com.sun.net.ssl.internal.ssl |
23357
7225e28e91dd
8033271: Manual security tests have @ignore rather than @run main/manual
wetmore
parents:
10890
diff
changeset
|
31 |
* @run main/manual ClientJSSEServerJSSE |
7225e28e91dd
8033271: Manual security tests have @ignore rather than @run main/manual
wetmore
parents:
10890
diff
changeset
|
32 |
*/ |
7225e28e91dd
8033271: Manual security tests have @ignore rather than @run main/manual
wetmore
parents:
10890
diff
changeset
|
33 |
|
7225e28e91dd
8033271: Manual security tests have @ignore rather than @run main/manual
wetmore
parents:
10890
diff
changeset
|
34 |
/* |
7225e28e91dd
8033271: Manual security tests have @ignore rather than @run main/manual
wetmore
parents:
10890
diff
changeset
|
35 |
* JSSE supported cipher suites are changed with CR 6916074, |
7225e28e91dd
8033271: Manual security tests have @ignore rather than @run main/manual
wetmore
parents:
10890
diff
changeset
|
36 |
* need to update this test case in JDK 7 soon |
2 | 37 |
*/ |
38 |
||
39 |
import java.security.*; |
|
40 |
||
41 |
// This test belongs more in JSSE than here, but the JSSE workspace does not |
|
42 |
// have the NSS test infrastructure. It will live here for the time being. |
|
43 |
||
44 |
public class ClientJSSEServerJSSE extends SecmodTest { |
|
45 |
||
46 |
public static void main(String[] args) throws Exception { |
|
47 |
if (initSecmod() == false) { |
|
48 |
return; |
|
49 |
} |
|
50 |
||
23733
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
51 |
String arch = System.getProperty("os.arch"); |
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
52 |
if (!("sparc".equals(arch) || "sparcv9".equals(arch))) { |
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
53 |
// we have not updated other platforms with the proper NSS |
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
54 |
// libraries yet |
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
55 |
System.out.println( |
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
56 |
"Test currently works only on solaris-sparc " + |
b9b80421cfa7
8028192: Use of PKCS11-NSS provider in FIPS mode broken
xuelei
parents:
23357
diff
changeset
|
57 |
"and solaris-sparcv9. Skipping on " + arch); |
2 | 58 |
return; |
59 |
} |
|
60 |
||
61 |
String configName = BASE + SEP + "fips.cfg"; |
|
62 |
Provider p = getSunPKCS11(configName); |
|
63 |
||
64 |
System.out.println(p); |
|
65 |
Security.addProvider(p); |
|
66 |
||
67 |
Security.removeProvider("SunJSSE"); |
|
68 |
Provider jsse = new com.sun.net.ssl.internal.ssl.Provider(p); |
|
69 |
Security.addProvider(jsse); |
|
70 |
System.out.println(jsse.getInfo()); |
|
71 |
||
72 |
KeyStore ks = KeyStore.getInstance("PKCS11", p); |
|
73 |
ks.load(null, "test12".toCharArray()); |
|
74 |
||
75 |
CipherTest.main(new JSSEFactory(), ks, args); |
|
76 |
} |
|
77 |
||
78 |
private static class JSSEFactory extends CipherTest.PeerFactory { |
|
79 |
||
80 |
String getName() { |
|
81 |
return "Client JSSE - Server JSSE"; |
|
82 |
} |
|
83 |
||
84 |
CipherTest.Client newClient(CipherTest cipherTest) throws Exception { |
|
85 |
return new JSSEClient(cipherTest); |
|
86 |
} |
|
87 |
||
88 |
CipherTest.Server newServer(CipherTest cipherTest) throws Exception { |
|
89 |
return new JSSEServer(cipherTest); |
|
90 |
} |
|
91 |
} |
|
92 |
} |