1 /*

     2  * Copyright (c) 2013, 2015, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.

     8  *

     9  * This code is distributed in the hope that it will be useful, but WITHOUT

    10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    12  * version 2 for more details (a copy is included in the LICENSE file that

    13  * accompanied this code).

    14  *

    15  * You should have received a copy of the GNU General Public License version

    16  * 2 along with this work; if not, write to the Free Software Foundation,

    17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    18  *

    19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    20  * or visit www.oracle.com if you need additional information or have any

    21  * questions.

    22  */

    23 

    24 import jdk.testlibrary.OutputAnalyzer;

    25 import jdk.testlibrary.ProcessTools;

    26 import jdk.testlibrary.JarUtils;

    27 

    28 /**

    29  * @test

    30  * @bug 8024302 8026037

    31  * @summary Test for hasExpiringCert warning

    32  * @library /lib/testlibrary ../

    33  * @run main HasExpiringCertTest

    34  */

    35 public class HasExpiringCertTest extends Test {

    36 

    37     static final int SHORT_VALIDITY = 90; // less than 6 month

    38 

    39     /**

    40      * The test signs and verifies a jar that contains entries

    41      * whose signer certificate will expire within six months (hasExpiringCert).

    42      * Warning message is expected.

    43      */

    44     public static void main(String[] args) throws Throwable {

    45         HasExpiringCertTest test = new HasExpiringCertTest();

    46         test.start();

    47     }

    48 

    49     private void start() throws Throwable {

    50         // create a jar file that contains one class file

    51         Utils.createFiles(FIRST_FILE);

    52         JarUtils.createJar(UNSIGNED_JARFILE, FIRST_FILE);

    53 

    54         // create key pair for jar signing

    55         ProcessTools.executeCommand(KEYTOOL,

    56                 "-genkey",

    57                 "-alias", KEY_ALIAS,

    58                 "-keyalg", KEY_ALG,

    59                 "-keysize", Integer.toString(KEY_SIZE),

    60                 "-keystore", KEYSTORE,

    61                 "-storepass", PASSWORD,

    62                 "-keypass", PASSWORD,

    63                 "-dname", "CN=Test",

    64                 "-validity", Integer.toString(SHORT_VALIDITY))

    65                 .shouldHaveExitValue(0);

    66 

    67         // sign jar

    68         OutputAnalyzer analyzer = ProcessTools.executeCommand(JARSIGNER,

    69                 "-keystore", KEYSTORE,

    70                 "-verbose",

    71                 "-storepass", PASSWORD,

    72                 "-keypass", PASSWORD,

    73                 "-signedjar", SIGNED_JARFILE,

    74                 UNSIGNED_JARFILE,

    75                 KEY_ALIAS);

    76 

    77         checkSigning(analyzer, HAS_EXPIRING_CERT_SIGNING_WARNING);

    78 

    79         // verify signed jar

    80         analyzer = ProcessTools.executeCommand(JARSIGNER,

    81                 "-verify",

    82                 "-verbose",

    83                 "-keystore", KEYSTORE,

    84                 "-storepass", PASSWORD,

    85                 "-keypass", PASSWORD,

    86                 SIGNED_JARFILE,

    87                 KEY_ALIAS);

    88 

    89         checkVerifying(analyzer, 0, HAS_EXPIRING_CERT_VERIFYING_WARNING);

    90 

    91         // verify signed jar in strict mode

    92         analyzer = ProcessTools.executeCommand(JARSIGNER,

    93                 "-verify",

    94                 "-verbose",

    95                 "-strict",

    96                 "-keystore", KEYSTORE,

    97                 "-storepass", PASSWORD,

    98                 "-keypass", PASSWORD,

    99                 SIGNED_JARFILE,

   100                 KEY_ALIAS);

   101 

   102         checkVerifying(analyzer, 0, HAS_EXPIRING_CERT_VERIFYING_WARNING);

   103 

   104         System.out.println("Test passed");

   105     }

   106 

   107 }