author | asmotrak |
Tue, 26 Jan 2016 13:32:07 -0800 | |
changeset 35379 | 1e8e336ef66b |
parent 14342 | 8435a30053c1 |
child 40975 | 680639c9b307 |
permissions | -rw-r--r-- |
2 | 1 |
/* |
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
2 |
* Copyright (c) 2006, 2016, Oracle and/or its affiliates. All rights reserved. |
2 | 3 |
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
4 |
* |
|
5 |
* This code is free software; you can redistribute it and/or modify it |
|
6 |
* under the terms of the GNU General Public License version 2 only, as |
|
7 |
* published by the Free Software Foundation. |
|
8 |
* |
|
9 |
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
10 |
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
11 |
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
12 |
* version 2 for more details (a copy is included in the LICENSE file that |
|
13 |
* accompanied this code). |
|
14 |
* |
|
15 |
* You should have received a copy of the GNU General Public License version |
|
16 |
* 2 along with this work; if not, write to the Free Software Foundation, |
|
17 |
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
18 |
* |
|
5506 | 19 |
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
20 |
* or visit www.oracle.com if you need additional information or have any |
|
21 |
* questions. |
|
2 | 22 |
*/ |
23 |
||
24 |
/** |
|
25 |
* @test |
|
26 |
* @bug 6269847 |
|
27 |
* @summary store a NSS PKCS11 PrivateKeyEntry to JKS KeyStore throws confusing NPE |
|
28 |
* @author Wang Weijun |
|
29 |
* @library .. |
|
10328 | 30 |
* @run main/othervm JksSetPrivateKey |
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
31 |
* @run main/othervm JksSetPrivateKey sm policy |
2 | 32 |
*/ |
33 |
||
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
34 |
import java.io.File; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
35 |
import java.security.KeyStore; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
36 |
import java.security.KeyStoreException; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
37 |
import java.security.PrivateKey; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
38 |
import java.security.Provider; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
39 |
import java.security.Security; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
40 |
import java.security.cert.X509Certificate; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
41 |
import java.util.Collection; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
42 |
import java.util.Collections; |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
43 |
import java.util.TreeSet; |
2 | 44 |
|
45 |
public class JksSetPrivateKey extends SecmodTest { |
|
46 |
||
47 |
public static void main(String[] args) throws Exception { |
|
48 |
if (initSecmod() == false) { |
|
49 |
return; |
|
50 |
} |
|
51 |
||
52 |
String configName = BASE + SEP + "nss.cfg"; |
|
53 |
Provider p = getSunPKCS11(configName); |
|
54 |
||
55 |
System.out.println(p); |
|
56 |
Security.addProvider(p); |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
57 |
|
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
58 |
if (args.length > 1 && "sm".equals(args[0])) { |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
59 |
System.setProperty("java.security.policy", |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
60 |
BASE + File.separator + args[1]); |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
61 |
System.setSecurityManager(new SecurityManager()); |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
62 |
} |
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
63 |
|
2 | 64 |
KeyStore ks = KeyStore.getInstance("PKCS11", p); |
65 |
ks.load(null, password); |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
66 |
Collection<String> aliases = new TreeSet<>(Collections.list(ks.aliases())); |
2 | 67 |
System.out.println("entries: " + aliases.size()); |
68 |
System.out.println(aliases); |
|
69 |
||
70 |
PrivateKey privateKey = (PrivateKey)ks.getKey(keyAlias, password); |
|
71 |
System.out.println(privateKey); |
|
72 |
||
73 |
X509Certificate[] chain = (X509Certificate[])ks.getCertificateChain(keyAlias); |
|
74 |
||
75 |
KeyStore jks = KeyStore.getInstance("JKS"); |
|
76 |
jks.load(null, null); |
|
77 |
||
78 |
try { |
|
79 |
jks.setKeyEntry("k1", privateKey, "changeit".toCharArray(), chain); |
|
80 |
throw new Exception("No, an NSS PrivateKey shouldn't be extractable and put inside a JKS keystore"); |
|
81 |
} catch (KeyStoreException e) { |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
82 |
System.err.println(e); // This is OK |
2 | 83 |
} |
84 |
||
85 |
try { |
|
86 |
jks.setKeyEntry("k2", new DummyPrivateKey(), "changeit".toCharArray(), chain); |
|
87 |
throw new Exception("No, non-PKCS#8 key shouldn't be put inside a KeyStore"); |
|
88 |
} catch (KeyStoreException e) { |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
89 |
System.err.println(e); // This is OK |
2 | 90 |
} |
91 |
System.out.println("OK"); |
|
92 |
||
93 |
try { |
|
94 |
jks.setKeyEntry("k3", new DummyPrivateKey2(), "changeit".toCharArray(), chain); |
|
95 |
throw new Exception("No, not-extractble key shouldn't be put inside a KeyStore"); |
|
96 |
} catch (KeyStoreException e) { |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
97 |
System.err.println(e); // This is OK |
2 | 98 |
} |
99 |
System.out.println("OK"); |
|
100 |
} |
|
101 |
} |
|
102 |
||
103 |
class DummyPrivateKey implements PrivateKey { |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
104 |
@Override |
2 | 105 |
public String getAlgorithm() { |
106 |
return "DUMMY"; |
|
107 |
} |
|
108 |
||
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
109 |
@Override |
2 | 110 |
public String getFormat() { |
111 |
return "DUMMY"; |
|
112 |
} |
|
113 |
||
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
114 |
@Override |
2 | 115 |
public byte[] getEncoded() { |
116 |
return "DUMMY".getBytes(); |
|
117 |
} |
|
118 |
} |
|
119 |
||
120 |
class DummyPrivateKey2 implements PrivateKey { |
|
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
121 |
@Override |
2 | 122 |
public String getAlgorithm() { |
123 |
return "DUMMY"; |
|
124 |
} |
|
125 |
||
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
126 |
@Override |
2 | 127 |
public String getFormat() { |
128 |
return "PKCS#8"; |
|
129 |
} |
|
130 |
||
35379
1e8e336ef66b
8144539: Update PKCS11 tests to run with security manager
asmotrak
parents:
14342
diff
changeset
|
131 |
@Override |
2 | 132 |
public byte[] getEncoded() { |
133 |
return null; |
|
134 |
} |
|
135 |
} |