1 /*

     2  * Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.

     8  *

     9  * This code is distributed in the hope that it will be useful, but WITHOUT

    10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    12  * version 2 for more details (a copy is included in the LICENSE file that

    13  * accompanied this code).

    14  *

    15  * You should have received a copy of the GNU General Public License version

    16  * 2 along with this work; if not, write to the Free Software Foundation,

    17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    18  *

    19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    20  * or visit www.oracle.com if you need additional information or have any

    21  * questions.

    22  */

    23 

    24 /*

    25  * @test

    26  * @bug 8010125 8192988

    27  * @summary keytool should support -storepasswd for pkcs12 keystores

    28  * @library /test/lib

    29  * @build jdk.test.lib.SecurityTools

    30  *        jdk.test.lib.Utils

    31  *        jdk.test.lib.Asserts

    32  *        jdk.test.lib.JDKToolFinder

    33  *        jdk.test.lib.JDKToolLauncher

    34  *        jdk.test.lib.Platform

    35  *        jdk.test.lib.process.*

    36  * @run main JKStoPKCS12

    37  */

    38 

    39 import jdk.test.lib.Asserts;

    40 import jdk.test.lib.SecurityTools;

    41 import jdk.test.lib.process.OutputAnalyzer;

    42 

    43 import java.io.File;

    44 import java.nio.file.Files;

    45 import java.nio.file.Paths;

    46 import java.security.KeyStore;

    47 import java.util.Collections;

    48 

    49 public class JKStoPKCS12 {

    50 

    51     static String srcStorePass, srcKeyPass;

    52 

    53     public static void main(String[] args) throws Exception {

    54 

    55         // Part 1: JKS keystore with same storepass and keypass

    56         genJKS("pass1111", "pass1111");

    57 

    58         // Change storepass, keypass also changes

    59         convert("pass2222", null);

    60         // You can keep storepass unchanged

    61         convert("pass1111", null);

    62         // Or change storepass and keypass both, explicitly

    63         convert("pass2222", "pass2222");

    64 

    65         // Part 2: JKS keystore with different storepass and keypass

    66         Files.delete(Paths.get("jks"));

    67         genJKS("pass1111", "pass2222");

    68 

    69         // Can use old keypass as new storepass so new storepass and keypass are same

    70         convert("pass2222", null);

    71         // Or specify both storepass and keypass to brand new ones

    72         convert("pass3333", "pass3333");

    73         // Or change storepass, keypass also changes. Remember to provide srckeypass

    74         convert("pass1111", null);

    75     }

    76 

    77     // Generate JKS keystore with srcStorePass and srcKeyPass

    78     static void genJKS(String storePass, String keyPass)

    79             throws Exception {

    80         srcStorePass = storePass;

    81         srcKeyPass = keyPass;

    82         kt("-genkeypair -keystore jks -storetype jks "

    83                     + "-alias me -dname CN=Me -keyalg rsa "

    84                     + "-storepass " + srcStorePass + " -keypass " + srcKeyPass)

    85                 .shouldHaveExitValue(0);

    86     }

    87 

    88     // Convert JKS to PKCS12 with destStorePass and destKeyPass (optional)

    89     static void convert(String destStorePass, String destKeyPass)

    90             throws Exception {

    91 

    92         String cmd = "-importkeystore -noprompt"

    93                 + " -srcstoretype jks -srckeystore jks"

    94                 + " -destkeystore p12 -deststoretype pkcs12"

    95                 + " -srcstorepass " + srcStorePass

    96                 + " -deststorepass " + destStorePass;

    97 

    98         // Must import by alias (-srckeypass not available when importing all)

    99         if (!srcStorePass.equals(srcKeyPass)) {

   100             cmd += " -srcalias me";

   101             cmd += " -srckeypass " + srcKeyPass;

   102         }

   103         if (destKeyPass != null) {

   104             cmd += " -destkeypass " + destKeyPass;

   105         }

   106 

   107         kt(cmd).shouldHaveExitValue(0);

   108 

   109         // Confirms the storepass and keypass are all correct

   110         KeyStore.getInstance(new File("p12"), destStorePass.toCharArray())

   111                 .getKey("me", destStorePass.toCharArray());

   112 

   113         Files.delete(Paths.get("p12"));

   114     }

   115 

   116     static OutputAnalyzer kt(String arg) throws Exception {

   117         return SecurityTools.keytool(arg);

   118     }

   119 }