#

# Copyright (c) 2012, 2013, Oracle and/or its affiliates. All rights reserved.

# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

#

# This code is free software; you can redistribute it and/or modify it

# under the terms of the GNU General Public License version 2 only, as

# published by the Free Software Foundation.

#

# This code is distributed in the hope that it will be useful, but WITHOUT

# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

# version 2 for more details (a copy is included in the LICENSE file that

# accompanied this code).

#

# You should have received a copy of the GNU General Public License version

# 2 along with this work; if not, write to the Free Software Foundation,

# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

#

# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

# or visit www.oracle.com if you need additional information or have any

# questions.

#

# @test

# @bug 7133495

# @summary [macosx] KeyChain KeyStore implementation retrieves only one private key entry

if [ "${TESTJAVA}" = "" ] ; then

    JAVAC_CMD=`which javac`

    TESTJAVA=`dirname $JAVAC_CMD`/..

fi

if [ "${TESTCLASSES}" = "" ] ; then

    TESTCLASSES=`pwd`

fi

# Only run on MacOS

OS=`uname -s`

case "$OS" in

    Darwin )

        ;;

    * )

        echo "Will not run test on: ${OS}"

        exit 0;

        ;;

esac

PWD="xxxxxx"

TEMPORARY_P12="$TESTCLASSES/7133495.p12"

TEMPORARY_KC="$TESTCLASSES/7133495.keychain"

CLEANUP_P12="rm -f $TEMPORARY_P12"

CLEANUP_KC="security delete-keychain $TEMPORARY_KC"

# Count the number of private key entries in the Keychain keystores

COUNT=`$KEYTOOL -list | grep PrivateKeyEntry | wc -l`

echo "Found $COUNT private key entries in the Keychain keystores"

if [ $COUNT -gt 1 ]; then

    exit 0

fi

# Create a temporary PKCS12 keystore containing 3 public/private keypairs

RESULT=`$CLEANUP_P12`

for i in X Y Z

do

        -storetype PKCS12 \

        -keystore $TEMPORARY_P12 \

        -storepass $PWD \

        -keyalg rsa \

        -dname "CN=$i,OU=$i,O=$i,ST=$i,C=US" \

        -alias 7133495-$i

    if [ $? -ne 0 ]; then

        echo "Error: cannot create keypair $i in the temporary PKCS12 keystore"

        RESULT=`$CLEANUP_P12`

        exit 1

    fi

done

echo "Created a temporary PKCS12 keystore: $TEMPORARY_P12"

# Create a temporary keychain

security create-keychain -p $PWD $TEMPORARY_KC

if [ $? -ne 0 ]; then

    echo "Error: cannot create the temporary keychain"

    RESULT=`$CLEANUP_P12`

    exit 2

fi

echo "Created a temporary keychain: $TEMPORARY_KC"

# Unlock the temporary keychain

security unlock-keychain -p $PWD $TEMPORARY_KC

if [ $? -ne 0 ]; then

    echo "Error: cannot unlock the temporary keychain"

    RESULT=`$CLEANUP_P12`

    RESULT=`$CLEANUP_KC`

    exit 3

fi

echo "Unlocked the temporary keychain"

# Import the keypairs from the PKCS12 keystore into the keychain

security import $TEMPORARY_P12 -k $TEMPORARY_KC -f pkcs12 -P $PWD

if [ $? -ne 0 ]; then

    echo "Error: cannot import keypairs from PKCS12 keystore into the keychain"

    RESULT=`$CLEANUP_P12`

    RESULT=`$CLEANUP_KC`

    exit 4

fi

echo "Imported keypairs from PKCS12 keystore into the keychain"

# Recount the number of private key entries in the Keychain keystores

COUNT=`$KEYTOOL -list | grep PrivateKeyEntry | wc -l`

echo "Found $COUNT private key entries in the Keychain keystore"

if [ $COUNT -lt 3 ]; then

    echo "Error: expected >2 private key entries in the Keychain keystores"

    RESULT=`$CLEANUP_P12`

    RESULT=`$CLEANUP_KC`

    exit 5

fi

RESULT=`$CLEANUP_P12`

if [ $? -ne 0 ]; then

    echo "Error: cannot remove the temporary PKCS12 keystore"

    exit 6

fi

echo "Removed the temporary PKCS12 keystore"

RESULT=`$CLEANUP_KC`

if [ $? -ne 0 ]; then

    echo "Error: cannot remove the temporary keychain"

    exit 7

fi

echo "Removed the temporary keychain"

exit 0