1 /* 2 * Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved. 3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 4 * 5 * This code is free software; you can redistribute it and/or modify it 6 * under the terms of the GNU General Public License version 2 only, as 7 * published by the Free Software Foundation. 8 * 9 * This code is distributed in the hope that it will be useful, but WITHOUT 10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 12 * version 2 for more details (a copy is included in the LICENSE file that 13 * accompanied this code). 14 * 15 * You should have received a copy of the GNU General Public License version 16 * 2 along with this work; if not, write to the Free Software Foundation, 17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 18 * 19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA 20 * or visit www.oracle.com if you need additional information or have any 21 * questions. 22 */ 23 24 /** 25 * @test 26 * @bug 8175029 27 * @library ../../testlibrary 28 * @summary check that default implementation of 29 * X509CRL.verify(PublicKey, Provider) works on custom X509CRL impl. 30 */ 31 32 import java.math.BigInteger; 33 import java.security.InvalidKeyException; 34 import java.security.NoSuchAlgorithmException; 35 import java.security.NoSuchProviderException; 36 import java.security.Principal; 37 import java.security.Provider; 38 import java.security.PublicKey; 39 import java.security.SignatureException; 40 import java.security.cert.Certificate; 41 import java.security.cert.CRLException; 42 import java.security.cert.X509Certificate; 43 import java.security.cert.X509CRL; 44 import java.security.cert.X509CRLEntry; 45 import java.util.Date; 46 import java.util.Set; 47 48 public class VerifyDefault { 49 private static final String TEST_CRL = 50 "-----BEGIN X509 CRL-----\n" + 51 "MIIBGzCBhQIBATANBgkqhkiG9w0BAQQFADAfMQswCQYDVQQGEwJVUzEQMA4GA1UE\n" + 52 "ChMHRXhhbXBsZRcNMDkwNDI3MDIzODA0WhcNMjgwNjI2MDIzODA0WjAiMCACAQUX\n" + 53 "DTA5MDQyNzAyMzgwMFowDDAKBgNVHRUEAwoBBKAOMAwwCgYDVR0UBAMCAQIwDQYJ\n" + 54 "KoZIhvcNAQEEBQADgYEAoarfzXEtw3ZDi4f9U8eSvRIipHSyxOrJC7HR/hM5VhmY\n" + 55 "CErChny6x9lBVg9s57tfD/P9PSzBLusCcHwHMAbMOEcTltVVKUWZnnbumpywlYyg\n" + 56 "oKLrE9+yCOkYUOpiRlz43/3vkEL5hjIKMcDSZnPKBZi1h16Yj2hPe9GMibNip54=\n" + 57 "-----END X509 CRL-----"; 58 59 private static final String TEST_CERT = 60 "-----BEGIN CERTIFICATE-----\n" + 61 "MIICKzCCAZSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAfMQswCQYDVQQGEwJVUzEQ\n" + 62 "MA4GA1UEChMHRXhhbXBsZTAeFw0wOTA0MjcwMjI0MzNaFw0yOTAxMTIwMjI0MzNa\n" + 63 "MB8xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFeGFtcGxlMIGfMA0GCSqGSIb3DQEB\n" + 64 "AQUAA4GNADCBiQKBgQDMJeBMBybHykI/YpwUJ4O9euqDSLb1kpWpceBS8TVqvgBC\n" + 65 "SgUJWtFZL0i6bdvF6mMdlbuBkGzhXqHiVAi96/zRLbUC9F8SMEJ6MuD+YhQ0ZFTQ\n" + 66 "atKy8zf8O9XzztelLJ26Gqb7QPV133WY3haAqHtCXOhEKkCN16NOYNC37DTaJwID\n" + 67 "AQABo3cwdTAdBgNVHQ4EFgQULXSWzXzUOIpOJpzbSCpW42IJUugwRwYDVR0jBEAw\n" + 68 "PoAUgiXdIaZeT3QA/SGUvh854OJVyxuhI6QhMB8xCzAJBgNVBAYTAlVTMRAwDgYD\n" + 69 "VQQKEwdFeGFtcGxlggEAMAsGA1UdDwQEAwIBAjANBgkqhkiG9w0BAQQFAAOBgQAY\n" + 70 "eMnf5AHSNlyUlzXk8o2S0h4gCuvKX6C3kFfKuZcWvFAbx4yQOWLS2s15/nzR4+AP\n" + 71 "FGX3lgJjROyAh7fGedTQK+NFWwkM2ag1g3hXktnlnT1qHohi0w31nVBJxXEDO/Ck\n" + 72 "uJTpJGt8XxxbFaw5v7cHy7XuTAeU/sekvjEiNHW00Q==\n" + 73 "-----END CERTIFICATE-----"; 74 75 private static class TestX509CRL extends X509CRL { 76 private final X509CRL crl; TestX509CRL(X509CRL crl)77 TestX509CRL(X509CRL crl) { 78 this.crl = crl; 79 } getCriticalExtensionOIDs()80 public Set<String> getCriticalExtensionOIDs() { 81 return crl.getCriticalExtensionOIDs(); 82 } getExtensionValue(String oid)83 public byte[] getExtensionValue(String oid) { 84 return crl.getExtensionValue(oid); 85 } getNonCriticalExtensionOIDs()86 public Set<String> getNonCriticalExtensionOIDs() { 87 return crl.getNonCriticalExtensionOIDs(); 88 } hasUnsupportedCriticalExtension()89 public boolean hasUnsupportedCriticalExtension() { 90 return crl.hasUnsupportedCriticalExtension(); 91 } getRevokedCertificates()92 public Set<? extends X509CRLEntry> getRevokedCertificates() { 93 return crl.getRevokedCertificates(); 94 } getRevokedCertificate(BigInteger serialNumber)95 public X509CRLEntry getRevokedCertificate(BigInteger serialNumber) { 96 return crl.getRevokedCertificate(serialNumber); 97 } isRevoked(Certificate cert)98 public boolean isRevoked(Certificate cert) { 99 return crl.isRevoked(cert); 100 } getNextUpdate()101 public Date getNextUpdate() { return crl.getNextUpdate(); } getThisUpdate()102 public Date getThisUpdate() { return crl.getThisUpdate(); } getVersion()103 public int getVersion() { return crl.getVersion(); } getIssuerDN()104 public Principal getIssuerDN() { return crl.getIssuerDN(); } getTBSCertList()105 public byte[] getTBSCertList() throws CRLException { 106 return crl.getTBSCertList(); 107 } getSignature()108 public byte[] getSignature() { return crl.getSignature(); } getSigAlgName()109 public String getSigAlgName() { return crl.getSigAlgName(); } getSigAlgOID()110 public String getSigAlgOID() { return crl.getSigAlgOID(); } getSigAlgParams()111 public byte[] getSigAlgParams() { return crl.getSigAlgParams(); } getEncoded()112 public byte[] getEncoded() throws CRLException { 113 return crl.getEncoded(); 114 } verify(PublicKey key)115 public void verify(PublicKey key) throws CRLException, 116 InvalidKeyException, NoSuchAlgorithmException, 117 NoSuchProviderException, SignatureException { 118 crl.verify(key); 119 } verify(PublicKey key, String sigProvider)120 public void verify(PublicKey key, String sigProvider) throws 121 CRLException, InvalidKeyException, NoSuchAlgorithmException, 122 NoSuchProviderException, SignatureException { 123 crl.verify(key, sigProvider); 124 } toString()125 public String toString() { return crl.toString(); } 126 } 127 main(String[] args)128 public static void main(String[] args) throws Exception { 129 X509Certificate cert = CertUtils.getCertFromString(TEST_CERT); 130 X509CRL crl = CertUtils.getCRLFromString(TEST_CRL); 131 new TestX509CRL(crl).verify(cert.getPublicKey(), (Provider)null); 132 } 133 } 134