| author | jjiang |
| Mon, 30 Oct 2017 03:52:38 -0700 | |
| changeset 47474 | 3739268c203f |
| parent 47470 | 359c604930af |
| child 49571 | 7c82bb507446 |
| permissions | -rw-r--r-- |
|
38380
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
1 |
Keystores used for the JSSE regression test suite. |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
2 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
3 |
keystore |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
4 |
truststore |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
5 |
========== |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
6 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
7 |
These are the primary two keystores and contain entries for testing most |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
8 |
of the JSSE regression test files. There are three entries, one RSA-based, |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
9 |
one DSA-based and one EC-based. If they expire, simply recreate them |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
10 |
using keytool and most of the test cases should work. |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
11 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
12 |
The password on both files is: |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
13 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
14 |
passphrase |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
15 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
16 |
There are no individual key entry passwords at this time. |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
17 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
18 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
19 |
keystore entries |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
20 |
================ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
21 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
22 |
Alias name: dummy |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
23 |
----------------- |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
24 |
Creation date: May 16, 2016 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
25 |
Entry type: PrivateKeyEntry |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
26 |
Certificate chain length: 1 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
27 |
Certificate[1]: |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
28 |
Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
29 |
Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
30 |
Serial number: 57399b87 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
31 |
Valid from: Mon May 16 10:06:38 UTC 2016 until: Sat May 16 10:06:38 UTC 2026 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
32 |
Signature algorithm name: SHA256withRSA |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
33 |
Version: 1 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
34 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
35 |
This can be generated using hacked (update the keytool source code so that |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
36 |
it can be used for version 1 X.509 certificate) keytool command: |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
37 |
% keytool -genkeypair -alias dummy -keyalg RSA -keysize 2048 \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
38 |
-sigalg SHA256withRSA \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
39 |
-dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
40 |
-validity 3652 -keypass passphrase -keystore keystore -storepass passphrase |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
41 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
42 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
43 |
Alias name: dummyecdsa |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
44 |
---------------------- |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
45 |
Creation date: May 16, 2016 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
46 |
Entry type: PrivateKeyEntry |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
47 |
Certificate chain length: 1 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
48 |
Certificate[1]: |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
49 |
Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
50 |
Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
51 |
Serial number: 57399c1d |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
52 |
Valid from: Mon May 16 10:09:01 UTC 2016 until: Sat May 16 10:09:01 UTC 2026 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
53 |
Signature algorithm name: SHA256withECDSA |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
54 |
Version: 1 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
55 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
56 |
This can be generated using hacked (update the keytool source code so that |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
57 |
it can be used for version 1 X.509 certificate) keytool command: |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
58 |
% keytool -genkeypair -alias dummy -keyalg EC -keysize 256 \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
59 |
-sigalg SHA256withECDSA \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
60 |
-dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
61 |
-validity 3652 -keypass passphrase -keystore keystore -storepass passphrase |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
62 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
63 |
Alias name: dummydsa |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
64 |
-------------------- |
|
47474
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
65 |
Creation date: Mar 11, 2007 |
|
38380
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
66 |
Entry type: PrivateKeyEntry |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
67 |
Certificate chain length: 1 |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
68 |
Certificate[1]: |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
69 |
Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
70 |
Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US |
|
47474
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
71 |
Serial number: 45f3a314 |
|
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
72 |
Valid from: Sun Mar 11 06:35:00 UTC 2007 until: Wed Mar 08 06:35:00 UTC 2017 |
|
38380
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
73 |
Certificate fingerprints: |
|
47474
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
74 |
Signature algorithm name: SHA1withDSA |
|
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
75 |
Version: 1 |
|
38380
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
76 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
77 |
This can be generated using hacked (update the keytool source code so that |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
78 |
it can be used for version 1 X.509 certificate) keytool command: |
|
47474
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
79 |
% keytool -genkeypair -alias dummy -keyalg DSA -keysize 1024 \ |
|
3739268c203f
8175252: Backout changeset for JDK-8176354 due to JDK-8190333
jjiang
parents:
47470
diff
changeset
|
80 |
-sigalg SHA1withDSA \ |
|
38380
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
81 |
-dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
82 |
-validity 3652 -keypass passphrase -keystore keystore -storepass passphrase |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
83 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
84 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
85 |
truststore entries |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
86 |
================== |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
87 |
This key store contains only trusted certificate entries. The same |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
88 |
certificates are used in both keystore and truststore. |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
89 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
90 |
|
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
91 |
unknown_keystore |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
92 |
================ |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
93 |
A keystore you can use when you don't want things to be verified. |
|
24e6bb1a50ac
8157035: Use stronger algorithms and keys for JSSE testing
xuelei
parents:
diff
changeset
|
94 |
Use this with keystore/truststore, and you'll never get a match. |