1 /*

     2  * Copyright (c) 2013, 2015, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.

     8  *

     9  * This code is distributed in the hope that it will be useful, but WITHOUT

    10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    12  * version 2 for more details (a copy is included in the LICENSE file that

    13  * accompanied this code).

    14  *

    15  * You should have received a copy of the GNU General Public License version

    16  * 2 along with this work; if not, write to the Free Software Foundation,

    17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    18  *

    19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    20  * or visit www.oracle.com if you need additional information or have any

    21  * questions.

    22  */

    23 

    24 import java.util.Date;

    25 import jdk.testlibrary.OutputAnalyzer;

    26 import jdk.testlibrary.ProcessTools;

    27 import jdk.testlibrary.JarUtils;

    28 

    29 /**

    30  * @test

    31  * @bug 8024302 8026037

    32  * @summary Checks warnings if -tsa and -tsacert options are not specified

    33  * @library /lib/testlibrary ../

    34  * @run main NoTimestampTest

    35  */

    36 public class NoTimestampTest extends Test {

    37 

    38     /**

    39      * The test signs and verifies a jar file without -tsa and -tsacert options,

    40      * and checks that proper warnings are shown.

    41      */

    42     public static void main(String[] args) throws Throwable {

    43         NoTimestampTest test = new NoTimestampTest();

    44         test.start();

    45     }

    46 

    47     private void start() throws Throwable {

    48         String timezone = System.getProperty("user.timezone");

    49         System.out.println(String.format("Timezone = %s", timezone));

    50 

    51         // create a jar file that contains one class file

    52         Utils.createFiles(FIRST_FILE);

    53         JarUtils.createJar(UNSIGNED_JARFILE, FIRST_FILE);

    54 

    55         // calculate certificate expiration date

    56         Date expirationDate = new Date(System.currentTimeMillis() + VALIDITY

    57                 * 24 * 60 * 60 * 1000L);

    58 

    59         // create key pair

    60         ProcessTools.executeCommand(KEYTOOL,

    61                 "-genkey",

    62                 "-alias", KEY_ALIAS,

    63                 "-keyalg", KEY_ALG,

    64                 "-keysize", Integer.toString(KEY_SIZE),

    65                 "-keystore", KEYSTORE,

    66                 "-storepass", PASSWORD,

    67                 "-keypass", PASSWORD,

    68                 "-dname", "CN=Test",

    69                 "-validity", Integer.toString(VALIDITY));

    70 

    71         // sign jar file

    72         OutputAnalyzer analyzer = ProcessTools.executeCommand(JARSIGNER,

    73                 "-J-Duser.timezone=" + timezone,

    74                 "-keystore", KEYSTORE,

    75                 "-storepass", PASSWORD,

    76                 "-keypass", PASSWORD,

    77                 "-signedjar", SIGNED_JARFILE,

    78                 UNSIGNED_JARFILE,

    79                 KEY_ALIAS);

    80 

    81         String warning = String.format(NO_TIMESTAMP_SIGNING_WARN_TEMPLATE,

    82                 expirationDate);

    83         checkSigning(analyzer, warning);

    84 

    85         // verify signed jar

    86         analyzer = ProcessTools.executeCommand(JARSIGNER,

    87                 "-J-Duser.timezone=" + timezone,

    88                 "-verify",

    89                 "-keystore", KEYSTORE,

    90                 "-storepass", PASSWORD,

    91                 "-keypass", PASSWORD,

    92                 SIGNED_JARFILE,

    93                 KEY_ALIAS);

    94 

    95         warning = String.format(NO_TIMESTAMP_VERIFYING_WARN_TEMPLATE, expirationDate);

    96         checkVerifying(analyzer, 0, warning);

    97 

    98         // verify signed jar in strict mode

    99         analyzer = ProcessTools.executeCommand(JARSIGNER,

   100                 "-J-Duser.timezone=" + timezone,

   101                 "-verify",

   102                 "-strict",

   103                 "-keystore", KEYSTORE,

   104                 "-storepass", PASSWORD,

   105                 "-keypass", PASSWORD,

   106                 SIGNED_JARFILE,

   107                 KEY_ALIAS);

   108 

   109         checkVerifying(analyzer, 0, warning);

   110 

   111         System.out.println("Test passed");

   112     }

   113 

   114 }