1 /*
2  * Copyright (c) 2004, Oracle and/or its affiliates. All rights reserved.
3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4  *
5  * This code is free software; you can redistribute it and/or modify it
6  * under the terms of the GNU General Public License version 2 only, as
7  * published by the Free Software Foundation.
8  *
9  * This code is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
12  * version 2 for more details (a copy is included in the LICENSE file that
13  * accompanied this code).
14  *
15  * You should have received a copy of the GNU General Public License version
16  * 2 along with this work; if not, write to the Free Software Foundation,
17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18  *
19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20  * or visit www.oracle.com if you need additional information or have any
21  * questions.
22  */
23 
24 /*
25  * @test
26  * @bug     5091374 5100603
27  * @summary make sure the JKS case sensitivity works correctly
28  * @author  Andreas Sterbenz
29  */
30 
31 import java.io.*;
32 import java.util.*;
33 
34 import java.security.*;
35 import java.security.cert.*;
36 import java.security.cert.Certificate;
37 
38 public class CaseSensitiveAliases {
39 
40     // some arbitrary certs
41 
42     private final static String S1 =
43 "-----BEGIN CERTIFICATE-----\n" +
44 "MIIB4DCCAYoCAQEwDQYJKoZIhvcNAQEEBQAwezELMAkGA1UEBhMCVVMxCzAJBgNV" +
45 "BAgTAkNBMRIwEAYDVQQHEwlDdXBlcnRpbm8xGTAXBgNVBAoTEFN1biBNaWNyb3N5" +
46 "c3RlbXMxFjAUBgNVBAsTDUphdmEgU29mdHdhcmUxGDAWBgNVBAMTD0pDRSBEZXZl" +
47 "bG9wbWVudDAeFw0wMjEwMzExNTI3NDRaFw0wNzEwMzExNTI3NDRaMHsxCzAJBgNV" +
48 "BAYTAlVTMQswCQYDVQQIEwJDQTESMBAGA1UEBxMJQ3VwZXJ0aW5vMRkwFwYDVQQK" +
49 "ExBTdW4gTWljcm9zeXN0ZW1zMRYwFAYDVQQLEw1KYXZhIFNvZnR3YXJlMRgwFgYD" +
50 "VQQDEw9KQ0UgRGV2ZWxvcG1lbnQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAo/4C" +
51 "ddEOa3M6v9JFAhnBYgTq54Y30++F8yzCK9EeYaG3AzvzZqNshDy579647p0cOM/4" +
52 "VO6rU2PgbzgKXPcs8wIDAQABMA0GCSqGSIb3DQEBBAUAA0EACqPlFmVdKdYSCTNl" +
53 "tXKQnBqss9GNjbnB+CitvWrwN+oOK8qQpvV+5LB6LruvRy6zCedCV95Z2kXKg/Fn" +
54 "j0gvsg==\n" +
55 "-----END CERTIFICATE-----";
56 
57     private final static String S2 =
58 "-----BEGIN CERTIFICATE-----\n" +
59 "MIIB4DCCAYoCAQIwDQYJKoZIhvcNAQEEBQAwezELMAkGA1UEBhMCVVMxCzAJBgNV" +
60 "BAgTAkNBMRIwEAYDVQQHEwlDdXBlcnRpbm8xGTAXBgNVBAoTEFN1biBNaWNyb3N5" +
61 "c3RlbXMxFjAUBgNVBAsTDUphdmEgU29mdHdhcmUxGDAWBgNVBAMTD0pDRSBEZXZl" +
62 "bG9wbWVudDAeFw0wMjEwMzExNTI3NDRaFw0wNzEwMzExNTI3NDRaMHsxCzAJBgNV" +
63 "BAYTAlVTMQswCQYDVQQIEwJDQTESMBAGA1UEBxMJQ3VwZXJ0aW5vMRkwFwYDVQQK" +
64 "ExBTdW4gTWljcm9zeXN0ZW1zMRYwFAYDVQQLEw1KYXZhIFNvZnR3YXJlMRgwFgYD" +
65 "VQQDEw9KQ0UgRGV2ZWxvcG1lbnQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAr1OS" +
66 "XaOzpnVoqL2LqS5+HLy1kVvBwiM/E5iYT9eZaghE8qvF+4fETipWUNTWCQzHR4cD" +
67 "JGJOl9Nm77tELhES4QIDAQABMA0GCSqGSIb3DQEBBAUAA0EAL+WcVFyj+iXlEVNV" +
68 "QbNOOUlWmlmXGiNKKXnIdNcc1ZUyi+JW0zmlfZ7iU/eRYhEEJBwdrUoyiGOGLo7p" +
69 "i6JzAA==\n" +
70 "-----END CERTIFICATE-----";
71 
72     private static CertificateFactory cf;
73 
parseCert(String s)74     private static X509Certificate parseCert(String s) throws Exception {
75         if (cf == null) {
76             cf = CertificateFactory.getInstance("X.509");
77         }
78         InputStream in = new ByteArrayInputStream(s.getBytes("UTF8"));
79         return (X509Certificate)cf.generateCertificate(in);
80     }
81 
main(String[] args)82     public static void main(String[] args) throws Exception {
83         main("JKS", true);
84         main("CaseExactJKS", false);
85     }
86 
main(String jks, boolean caseInsensitive)87     private static void main(String jks, boolean caseInsensitive) throws Exception {
88         X509Certificate c1 = parseCert(S1);
89         X509Certificate c2 = parseCert(S2);
90         X509Certificate[] a1 = {c1};
91         X509Certificate[] a2 = {c2};
92 
93         KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA");
94         kpg.initialize(512);
95         PrivateKey p1 = kpg.generateKeyPair().getPrivate();
96         PrivateKey p2 = kpg.generateKeyPair().getPrivate();
97 
98         KeyStore ks = KeyStore.getInstance(jks);
99         ks.load(null, null);
100 
101         char[] pw = "pw".toCharArray();
102 
103         ks.setKeyEntry("Alias", p1, pw, a1);
104         ks.setKeyEntry("ALIAS", p2, pw, a2);
105 
106         if (caseInsensitive) {
107             if (ks.size() != 1) {
108                 throw new Exception("size mismatch: " + ks.size());
109             }
110             match(p2, ks.getKey("alias", pw));
111             match(p2, ks.getKey("Alias", pw));
112             match(p2, ks.getKey("ALIAS", pw));
113             match(a2, ks.getCertificateChain("alias"));
114             match(a2, ks.getCertificateChain("Alias"));
115             match(a2, ks.getCertificateChain("ALIAS"));
116         } else {
117             if (ks.size() != 2) {
118                 throw new Exception("size mismatch: " + ks.size());
119             }
120             match(null, ks.getKey("alias", pw));
121             match(p1, ks.getKey("Alias", pw));
122             match(p2, ks.getKey("ALIAS", pw));
123             match(null, ks.getCertificateChain("alias"));
124             match(a1, ks.getCertificateChain("Alias"));
125             match(a2, ks.getCertificateChain("ALIAS"));
126         }
127 
128         System.out.println("OK: " + jks);
129     }
130 
match(Key p1, Key p2)131     private static void match(Key p1, Key p2) throws Exception {
132         System.out.println(String.valueOf(p2).split("\\n")[0]);
133         if ((p1 != p2) && (p1.equals(p2) == false)) {
134             throw new Exception("Private key mismatch");
135         }
136     }
137 
match(Certificate[] a1, Certificate[] a2)138     private static void match(Certificate[] a1, Certificate[] a2) throws Exception {
139         System.out.println(String.valueOf(a2).split("\\n")[0]);
140         if ((a1 != a2) && (Arrays.equals(a1, a2) == false)) {
141             throw new Exception("chain mismatch");
142         }
143     }
144 
145 }
146