1 /*

     2  * Copyright (c) 2016, 2019, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.  Oracle designates this

     8  * particular file as subject to the "Classpath" exception as provided

     9  * by Oracle in the LICENSE file that accompanied this code.

    10  *

    11  * This code is distributed in the hope that it will be useful, but WITHOUT

    12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    14  * version 2 for more details (a copy is included in the LICENSE file that

    15  * accompanied this code).

    16  *

    17  * You should have received a copy of the GNU General Public License version

    18  * 2 along with this work; if not, write to the Free Software Foundation,

    19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    20  *

    21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    22  * or visit www.oracle.com if you need additional information or have any

    23  * questions.

    24  */

    25 

    26 package jdk.incubator.jpackage.internal;

    27 

    28 import java.io.ByteArrayInputStream;

    29 import java.io.ByteArrayOutputStream;

    30 import java.io.File;

    31 import java.io.IOException;

    32 import java.io.PrintStream;

    33 import java.nio.file.StandardCopyOption;

    34 import java.nio.file.Files;

    35 import java.text.DateFormat;

    36 import java.text.ParseException;

    37 import java.text.SimpleDateFormat;

    38 import java.util.ArrayList;

    39 import java.util.Calendar;

    40 import java.util.Date;

    41 import java.util.List;

    42 import java.util.Locale;

    43 

    44 public final class MacCertificate {

    45     private final String certificate;

    46 

    47     public MacCertificate(String certificate) {

    48         this.certificate = certificate;

    49     }

    50 

    51     public boolean isValid() {

    52         return verifyCertificate(this.certificate);

    53     }

    54 

    55     private static File findCertificate(String certificate) {

    56         File result = null;

    57 

    58         List<String> args = new ArrayList<>();

    59         args.add("security");

    60         args.add("find-certificate");

    61         args.add("-c");

    62         args.add(certificate);

    63         args.add("-a");

    64         args.add("-p");

    65 

    66         try (ByteArrayOutputStream baos = new ByteArrayOutputStream();

    67                 PrintStream ps = new PrintStream(baos)) {

    68             ProcessBuilder security = new ProcessBuilder(args);

    69             IOUtils.exec(security, false, ps);

    70 

    71             File output = File.createTempFile("tempfile", ".tmp");

    72 

    73             Files.copy(new ByteArrayInputStream(baos.toByteArray()),

    74                     output.toPath(), StandardCopyOption.REPLACE_EXISTING);

    75 

    76             result = output;

    77         }

    78         catch (IOException ignored) {}

    79 

    80         return result;

    81     }

    82 

    83     private static Date findCertificateDate(String filename) {

    84         Date result = null;

    85 

    86         List<String> args = new ArrayList<>();

    87         args.add("/usr/bin/openssl");

    88         args.add("x509");

    89         args.add("-noout");

    90         args.add("-enddate");

    91         args.add("-in");

    92         args.add(filename);

    93 

    94         try (ByteArrayOutputStream baos = new ByteArrayOutputStream();

    95                 PrintStream ps = new PrintStream(baos)) {

    96             ProcessBuilder security = new ProcessBuilder(args);

    97             IOUtils.exec(security, false, ps);

    98             String output = baos.toString();

    99             output = output.substring(output.indexOf("=") + 1);

   100             DateFormat df = new SimpleDateFormat(

   101                     "MMM dd kk:mm:ss yyyy z", Locale.ENGLISH);

   102             result = df.parse(output);

   103         } catch (IOException | ParseException ex) {

   104             Log.verbose(ex);

   105         }

   106 

   107         return result;

   108     }

   109 

   110     private static boolean verifyCertificate(String certificate) {

   111         boolean result = false;

   112 

   113         try {

   114             File file = null;

   115             Date certificateDate = null;

   116 

   117             try {

   118                 file = findCertificate(certificate);

   119 

   120                 if (file != null) {

   121                     certificateDate = findCertificateDate(

   122                             file.getCanonicalPath());

   123                 }

   124             }

   125             finally {

   126                 if (file != null) {

   127                     file.delete();

   128                 }

   129             }

   130 

   131             if (certificateDate != null) {

   132                 Calendar c = Calendar.getInstance();

   133                 Date today = c.getTime();

   134 

   135                 if (certificateDate.after(today)) {

   136                     result = true;

   137                 }

   138             }

   139         }

   140         catch (IOException ignored) {}

   141 

   142         return result;

   143     }

   144 }