jdk/test/sun/security/tools/keytool/KeyToolTest.java
changeset 29110 ea89fdd8a5d5
parent 28243 47080f9ae750
child 29111 e9103f166a4a
--- a/jdk/test/sun/security/tools/keytool/KeyToolTest.java	Tue Feb 24 12:45:56 2015 -0800
+++ b/jdk/test/sun/security/tools/keytool/KeyToolTest.java	Wed Feb 25 18:30:07 2015 +0800
@@ -1184,6 +1184,16 @@
         assertTrue(!a.getExtension(new ObjectIdentifier("2.3.4")).isCritical());
         assertTrue(a.getExtensionValue("2.3.4").length == 6);
 
+        // 8073181: keytool -ext honored not working correctly
+        testOK("", simple+"-gencert -alias ca -infile test.req -ext " +
+                "honored=1.2.3,1.2.4:critical " +
+                "-debug -rfc -outfile test2.cert");
+        testOK("", simple+"-importcert -file test2.cert -alias b");
+        ks = loadStore("x.jks", "changeit", "JKS");
+        X509CertImpl b = (X509CertImpl)ks.getCertificate("b");
+        assertTrue(!b.getExtension(new ObjectIdentifier("1.2.3")).isCritical());
+        assertTrue(b.getExtension(new ObjectIdentifier("1.2.4")).isCritical());
+
         remove("x.jks");
         remove("test.req");
         remove("test.cert");