1 /* 2 * Copyright (c) 2012, 2015, Oracle and/or its affiliates. All rights reserved. 3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 4 * 5 * This code is free software; you can redistribute it and/or modify it 6 * under the terms of the GNU General Public License version 2 only, as 7 * published by the Free Software Foundation. 8 * 9 * This code is distributed in the hope that it will be useful, but WITHOUT 10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 12 * version 2 for more details (a copy is included in the LICENSE file that 13 * accompanied this code). 14 * 15 * You should have received a copy of the GNU General Public License version 16 * 2 along with this work; if not, write to the Free Software Foundation, 17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 18 * 19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA 20 * or visit www.oracle.com if you need additional information or have any 21 * questions. 22 */ 23 24 import java.io.File; 25 import java.io.IOException; 26 import java.nio.file.Files; 27 import java.nio.file.StandardOpenOption; 28 import java.util.Base64; 29 import jdk.testlibrary.OutputAnalyzer; 30 import static java.lang.System.out; 31 import java.nio.file.Paths; 32 import java.util.List; 33 34 /** 35 * @test 36 * @bug 8048830 37 * @summary Test for PKCS12 keystore list , export commands. Refer README for 38 * keystore files information 39 * @library /lib/testlibrary ../ 40 * @run main KeytoolReaderP12Test 41 */ 42 public class KeytoolReaderP12Test { 43 private static final String WORKING_DIRECTORY = System.getProperty( 44 "test.classes", "."+ File.separator); 45 //private static final String KS_PASSWD = "pass"; 46 private static final String KS_PASSWD = "storepass"; 47 private static final String CERT_CHAIN_PASSWD = "password"; 48 private static final String SOURCE_DIRECTORY = 49 System.getProperty("test.src", "." + File.separator); 50 main(String[] args)51 public static void main(String[] args) throws Exception { 52 List<String> expectedValues = null; 53 out.println("Self signed test"); 54 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 55 "api_private_key.p12_expected.data")); 56 readTest("api_private_key.p12.data", KS_PASSWD, expectedValues); 57 out.println("Self signed test Passed"); 58 59 out.println("private key with selfsigned cert, key pair not match"); 60 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 61 "api_private_key_not_match.p12_expected.data")); 62 readTest("api_private_key_not_match.p12.data", KS_PASSWD, 63 expectedValues); 64 out.println("private key with selfsigned cert, key pair " 65 + "not match passed"); 66 67 out.println("cert chain test"); 68 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 69 "api_cert_chain.p12_expected.data")); 70 readTest("api_cert_chain.p12.data", CERT_CHAIN_PASSWD, expectedValues); 71 out.println("cert chain test passed"); 72 73 out.println("IE self test"); 74 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 75 "ie_self.pfx.pem")); 76 exportTest("ie_self.pfx.data", "pkcs12testenduser1", 77 KS_PASSWD, expectedValues); 78 out.println("IE self test passed"); 79 80 out.println("IE chain test"); 81 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 82 "ie_chain.pfx.pem")); 83 exportTest("ie_chain.pfx.data", "servercert", 84 CERT_CHAIN_PASSWD, expectedValues); 85 out.println("IE chain test passed"); 86 87 out.println("Netscape self"); 88 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 89 "netscape_self.p12.pem")); 90 exportTest("netscape_self.p12.data", "pkcs12testenduser1", 91 KS_PASSWD, expectedValues); 92 out.println("Netscape self passed"); 93 94 out.println("Mozilla self test"); 95 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 96 "mozilla_self.p12.pem")); 97 exportTest("mozilla_self.p12.data", "pkcs12testenduser1", 98 KS_PASSWD, expectedValues); 99 out.println("Mozilla self test passed"); 100 101 out.println("Openssl test"); 102 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 103 "openssl.p12.pem")); 104 exportTest("openssl.p12.data", "servercert", CERT_CHAIN_PASSWD, expectedValues); 105 out.println("openssl test passed"); 106 107 out.println("with different keystore and entrykey password"); 108 expectedValues = Files.readAllLines(Paths.get(SOURCE_DIRECTORY, 109 "api_two_pass.p12_expected.data")); 110 readTest("api_two_pass.p12.data", KS_PASSWD, 111 expectedValues); 112 out.println("two pass test passed"); 113 } 114 readTest(String name, String password, List<String> expectedValues)115 private static void readTest(String name, String password, 116 List<String> expectedValues) 117 throws IOException { 118 convertToPFX(name); 119 final String[] command = new String[]{"-debug", "-list", "-v", 120 "-keystore", WORKING_DIRECTORY + File.separator + name, 121 "-storetype", "pkcs12", "-storepass", password}; 122 runAndValidate(command, expectedValues); 123 } 124 exportTest(String name, String alias, String password, List<String> expectedValues)125 private static void exportTest(String name, String alias, 126 String password, List<String> expectedValues) 127 throws IOException { 128 convertToPFX(name); 129 final String[] command = new String[]{"-debug", "-export", "-alias", 130 alias, "-keystore", WORKING_DIRECTORY + File.separator + name, 131 "-storepass", password, "-storetype", "pkcs12", "-rfc"}; 132 runAndValidate(command, expectedValues); 133 } 134 runAndValidate(String[] command, List<String> expectedValues)135 private static void runAndValidate(String[] command, 136 List<String> expectedValues) throws IOException { 137 OutputAnalyzer output = Utils.executeKeytoolCommand(command); 138 if (expectedValues != null) { 139 expectedValues.stream().forEach(line -> { 140 output.shouldContain(line); 141 }); 142 } 143 } 144 145 /** 146 * Decodes the base64 encoded keystore and writes into new file 147 * @param name base64 encoded keystore name 148 */ convertToPFX(String name)149 private static void convertToPFX(String name) throws IOException{ 150 File base64File = new File(SOURCE_DIRECTORY, name); 151 File pkcs12File = new File(WORKING_DIRECTORY, name); 152 byte[] input = Files.readAllBytes(base64File.toPath()); 153 Files.write(pkcs12File.toPath(), Base64.getMimeDecoder(). 154 decode(input), StandardOpenOption.CREATE); 155 } 156 } 157