/*

 * Copyright (c) 2007, 2013, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

/*

 * @test

 * @bug 6468285

 * @summary keytool ability to backdate self-signed certificates to compensate for clock skew

 * @modules java.base/sun.security.tools.keytool:+open

 * @run main StartDateTest

 */

import java.io.File;

import java.io.FileInputStream;

import java.lang.reflect.Method;

import java.security.KeyStore;

import java.security.cert.X509Certificate;

import java.util.Calendar;

import java.util.Date;

import java.util.GregorianCalendar;

public class StartDateTest {

    public static void main(String[] args) throws Exception {

        // Part 1: Test function

        Calendar cal = new GregorianCalendar();

        int year = cal.get(Calendar.YEAR);

        int month = cal.get(Calendar.MONTH);

        new File("jks").delete();

        run("one", "+1y");

        cal.setTime(getIssueDate("one"));

        System.out.println(cal);

        if (cal.get(Calendar.YEAR) != year + 1) {

            throw new Exception("Function check #1 fails");

        }

        run("two", "+1m");

        cal.setTime(getIssueDate("two"));

        System.out.println(cal);

        if (cal.get(Calendar.MONTH) != (month + 1) % 12) {

            throw new Exception("Function check #2 fails");

        }

        run("three", "2009/10/11 12:34:56");

        cal.setTime(getIssueDate("three"));

        System.out.println(cal);

        if (cal.get(Calendar.YEAR) != 2009 ||

                cal.get(Calendar.MONTH) != Calendar.OCTOBER ||

                cal.get(Calendar.DAY_OF_MONTH) != 11 ||

                cal.get(Calendar.HOUR_OF_DAY) != 12 ||

                cal.get(Calendar.MINUTE) != 34 ||

                cal.get(Calendar.SECOND) != 56) {

            throw new Exception("Function check #3 fails");

        }

        // Part 2: Test format

        Method m = sun.security.tools.keytool.Main.class.getDeclaredMethod(

                   "getStartDate", String.class);

        m.setAccessible(true);

        for (String s: new String[] {

                null,       //NOW!

                "+1m+1d",

                "+1y-1m+1d",

                "+3H",

                "+1M",

                "-5M",

                "+011d",

                "+22S",

                "+500S",

                "2001/01/01",

                "15:15:15",

                "2001/01/01 11:11:11",

                }) {

            try {

                System.out.println(s + " " + m.invoke(null, s));

            } catch (Exception e) {

                e.printStackTrace();

                throw new Exception("Failed at " + s);

            }

        }

        for (String s: new String[] {

                "",         // empty

                "+3",

                "+3m+",

                "+3m+3",

                "1m",       // no sign

                "+0x011d",  // hex number

                "+1m1d",    // no sign for the 2nd sub value

                "m",

                "+1h",      // h is not H

                "-1m1d",

                "-m",

                "x",

                "+1m +1d",

                "2007/07",

                "01:01",

                "+01:01:01",                // what's this?

                "1:01:01",

                "12pm",

                "2007/07/07  12:12:12",     // extra blank between

                "2001/01/01-11:11:11",

                "2007-07-07",               // non-standard date delim

                "2007/7/7",                 // no padding

                "07/07/07",                 // year's length not 4

                "1:1:1",

                }) {

            boolean failed = false;

            try {

                System.out.println(m.invoke(null, s));

            } catch (Exception e) {

                System.out.println(s + " " + e.getCause());

                failed = true;

            }

            if (!failed) throw new Exception("Failed at " + s);

        }

    }

    // The keytool command line template, alias and startdate TBD

    static String[] cmd = ("-alias tbd -startdate tbd -keystore jks " +

            "-storetype jks -storepass changeit -keypass changeit " +

            "-keyalg rsa -genkeypair -dname CN=Haha -debug").split(" ");

    static void run(String alias, String startDate) throws Exception {

        cmd[1] = alias;

        cmd[3] = startDate;

        sun.security.tools.keytool.Main.main(cmd);

    }

    static Date getIssueDate(String alias) throws Exception {

        KeyStore ks = KeyStore.getInstance("jks");

        try (FileInputStream fis = new FileInputStream("jks")) {

            ks.load(fis, "changeit".toCharArray());

        }

        X509Certificate cert = (X509Certificate)ks.getCertificate(alias);

        return cert.getNotBefore();

    }

}