author | ascarpino |
Mon, 17 Sep 2018 14:04:46 -0700 | |
changeset 51771 | 1f805481d8de |
parent 50768 | 68fa3d4026ea |
permissions | -rw-r--r-- |
50768 | 1 |
/* |
2 |
* Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved. |
|
3 |
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
|
4 |
* |
|
5 |
* This code is free software; you can redistribute it and/or modify it |
|
6 |
* under the terms of the GNU General Public License version 2 only, as |
|
7 |
* published by the Free Software Foundation. |
|
8 |
* |
|
9 |
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
10 |
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
11 |
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
12 |
* version 2 for more details (a copy is included in the LICENSE file that |
|
13 |
* accompanied this code). |
|
14 |
* |
|
15 |
* You should have received a copy of the GNU General Public License version |
|
16 |
* 2 along with this work; if not, write to the Free Software Foundation, |
|
17 |
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
18 |
* |
|
19 |
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
|
20 |
* or visit www.oracle.com if you need additional information or have any |
|
21 |
* questions. |
|
22 |
*/ |
|
23 |
||
24 |
// SunJSSE does not support dynamic system properties, no way to re-use |
|
25 |
// system properties in samevm/agentvm mode. |
|
26 |
||
27 |
/* |
|
28 |
* @test |
|
29 |
* @summary Test jdk.tls.client.protocols with DTLS |
|
30 |
* @run main/othervm -Djdk.tls.client.protocols="DTLSv1.0" |
|
31 |
* CustomizedDTLSDefaultProtocols |
|
32 |
*/ |
|
33 |
||
34 |
||
35 |
import java.security.Security; |
|
36 |
import java.util.Arrays; |
|
37 |
import java.util.HashSet; |
|
38 |
import java.util.Set; |
|
39 |
||
40 |
import javax.net.SocketFactory; |
|
41 |
import javax.net.ssl.KeyManager; |
|
42 |
import javax.net.ssl.SSLContext; |
|
43 |
import javax.net.ssl.SSLEngine; |
|
44 |
import javax.net.ssl.SSLParameters; |
|
45 |
import javax.net.ssl.SSLServerSocket; |
|
46 |
import javax.net.ssl.SSLServerSocketFactory; |
|
47 |
import javax.net.ssl.SSLSocket; |
|
48 |
import javax.net.ssl.TrustManager; |
|
49 |
||
50 |
public class CustomizedDTLSDefaultProtocols { |
|
51 |
||
52 |
enum ContextVersion { |
|
53 |
TLS_CV_01("DTLS", |
|
54 |
new String[] {"DTLSv1.0"}), |
|
55 |
TLS_CV_02("DTLSv1.0", |
|
56 |
new String[] {"DTLSv1.0"}), |
|
57 |
TLS_CV_03("DTLSv1.2", |
|
58 |
new String[] {"DTLSv1.0", "DTLSv1.2"}); |
|
59 |
||
60 |
final String contextVersion; |
|
61 |
final String[] enabledProtocols; |
|
62 |
final static String[] supportedProtocols = new String[] { |
|
63 |
"DTLSv1.0", "DTLSv1.2"}; |
|
64 |
||
65 |
ContextVersion(String contextVersion, String[] enabledProtocols) { |
|
66 |
this.contextVersion = contextVersion; |
|
67 |
this.enabledProtocols = enabledProtocols; |
|
68 |
} |
|
69 |
} |
|
70 |
||
71 |
private static boolean checkProtocols(String[] target, String[] expected) { |
|
72 |
boolean success = true; |
|
73 |
if (target.length == 0) { |
|
74 |
System.out.println("\tError: No protocols"); |
|
75 |
success = false; |
|
76 |
} |
|
77 |
||
78 |
if (!protocolEquals(target, expected)) { |
|
79 |
System.out.println("\tError: Expected to get protocols " + |
|
80 |
Arrays.toString(expected)); |
|
81 |
success = false; |
|
82 |
} |
|
83 |
System.out.println("\t Protocols found " + Arrays.toString(target)); |
|
84 |
||
85 |
return success; |
|
86 |
} |
|
87 |
||
88 |
private static boolean protocolEquals( |
|
89 |
String[] actualProtocols, |
|
90 |
String[] expectedProtocols) { |
|
91 |
if (actualProtocols.length != expectedProtocols.length) { |
|
92 |
return false; |
|
93 |
} |
|
94 |
||
95 |
Set<String> set = new HashSet<>(Arrays.asList(expectedProtocols)); |
|
96 |
for (String actual : actualProtocols) { |
|
97 |
if (set.add(actual)) { |
|
98 |
return false; |
|
99 |
} |
|
100 |
} |
|
101 |
||
102 |
return true; |
|
103 |
} |
|
104 |
||
105 |
private static boolean checkCipherSuites(String[] target) { |
|
106 |
boolean success = true; |
|
107 |
if (target.length == 0) { |
|
108 |
System.out.println("\tError: No cipher suites"); |
|
109 |
success = false; |
|
110 |
} |
|
111 |
||
112 |
return success; |
|
113 |
} |
|
114 |
||
115 |
public static void main(String[] args) throws Exception { |
|
116 |
// reset the security property to make sure that the algorithms |
|
117 |
// and keys used in this test are not disabled. |
|
118 |
Security.setProperty("jdk.tls.disabledAlgorithms", ""); |
|
119 |
||
120 |
boolean failed = false; |
|
121 |
for (ContextVersion cv : ContextVersion.values()) { |
|
122 |
System.out.println("Checking SSLContext of " + cv.contextVersion); |
|
123 |
SSLContext context = SSLContext.getInstance(cv.contextVersion); |
|
124 |
||
125 |
// Default SSLContext is initialized automatically. |
|
126 |
if (!cv.contextVersion.equals("Default")) { |
|
127 |
// Use default TK, KM and random. |
|
128 |
context.init((KeyManager[])null, (TrustManager[])null, null); |
|
129 |
} |
|
130 |
||
131 |
// |
|
132 |
// Check SSLContext |
|
133 |
// |
|
134 |
// Check default SSLParameters of SSLContext |
|
135 |
System.out.println("\tChecking default SSLParameters"); |
|
136 |
SSLParameters parameters = context.getDefaultSSLParameters(); |
|
137 |
||
138 |
String[] protocols = parameters.getProtocols(); |
|
139 |
failed |= !checkProtocols(protocols, cv.enabledProtocols); |
|
140 |
||
141 |
String[] ciphers = parameters.getCipherSuites(); |
|
142 |
failed |= !checkCipherSuites(ciphers); |
|
143 |
||
144 |
// Check supported SSLParameters of SSLContext |
|
145 |
System.out.println("\tChecking supported SSLParameters"); |
|
146 |
parameters = context.getSupportedSSLParameters(); |
|
147 |
||
148 |
protocols = parameters.getProtocols(); |
|
149 |
failed |= !checkProtocols(protocols, cv.supportedProtocols); |
|
150 |
||
151 |
ciphers = parameters.getCipherSuites(); |
|
152 |
failed |= !checkCipherSuites(ciphers); |
|
153 |
||
154 |
// |
|
155 |
// Check SSLEngine |
|
156 |
// |
|
157 |
// Check SSLParameters of SSLEngine |
|
158 |
System.out.println(); |
|
159 |
System.out.println("\tChecking SSLEngine of this SSLContext"); |
|
160 |
System.out.println("\tChecking SSLEngine.getSSLParameters()"); |
|
161 |
SSLEngine engine = context.createSSLEngine(); |
|
162 |
engine.setUseClientMode(true); |
|
163 |
parameters = engine.getSSLParameters(); |
|
164 |
||
165 |
protocols = parameters.getProtocols(); |
|
166 |
failed |= !checkProtocols(protocols, cv.enabledProtocols); |
|
167 |
||
168 |
ciphers = parameters.getCipherSuites(); |
|
169 |
failed |= !checkCipherSuites(ciphers); |
|
170 |
||
171 |
System.out.println("\tChecking SSLEngine.getEnabledProtocols()"); |
|
172 |
protocols = engine.getEnabledProtocols(); |
|
173 |
failed |= !checkProtocols(protocols, cv.enabledProtocols); |
|
174 |
||
175 |
System.out.println("\tChecking SSLEngine.getEnabledCipherSuites()"); |
|
176 |
ciphers = engine.getEnabledCipherSuites(); |
|
177 |
failed |= !checkCipherSuites(ciphers); |
|
178 |
||
179 |
System.out.println("\tChecking SSLEngine.getSupportedProtocols()"); |
|
180 |
protocols = engine.getSupportedProtocols(); |
|
181 |
failed |= !checkProtocols(protocols, cv.supportedProtocols); |
|
182 |
||
183 |
System.out.println( |
|
184 |
"\tChecking SSLEngine.getSupportedCipherSuites()"); |
|
185 |
ciphers = engine.getSupportedCipherSuites(); |
|
186 |
failed |= !checkCipherSuites(ciphers); |
|
187 |
||
188 |
// |
|
189 |
// Check SSLSocket |
|
190 |
// |
|
191 |
// Check SSLParameters of SSLSocket |
|
192 |
System.out.println(); |
|
193 |
System.out.println("\tChecking SSLSocket of this SSLContext"); |
|
51771
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
194 |
try { |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
195 |
context.getSocketFactory(); |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
196 |
failed = true; |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
197 |
System.out.println("SSLSocket returned a socket for DTLS"); |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
198 |
} catch (UnsupportedOperationException e) { |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
199 |
System.out.println("\t " + e.getMessage()); |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
200 |
} |
50768 | 201 |
|
202 |
// |
|
203 |
// Check SSLServerSocket |
|
204 |
// |
|
205 |
// Check SSLParameters of SSLServerSocket |
|
206 |
System.out.println(); |
|
207 |
System.out.println("\tChecking SSLServerSocket of this SSLContext"); |
|
51771
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
208 |
try { |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
209 |
context.getServerSocketFactory(); |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
210 |
failed = true; |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
211 |
System.out.println("SSLServerSocket returned a socket for DTLS"); |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
212 |
} catch (UnsupportedOperationException e) { |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
213 |
System.out.println("\t " + e.getMessage()); |
1f805481d8de
8209031: SSLSocket should throw an exception when configuring DTLS
ascarpino
parents:
50768
diff
changeset
|
214 |
} |
50768 | 215 |
} |
216 |
||
217 |
if (failed) { |
|
218 |
throw new Exception("Run into problems, see log for more details"); |
|
219 |
} else { |
|
220 |
System.out.println("\t... Success"); |
|
221 |
} |
|
222 |
} |
|
223 |
} |