ReadP12Test.java

/*
 * Copyright (c) 2003,2014, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

import static java.lang.System.out;
import java.io.ByteArrayInputStream;
import java.io.File;
import java.io.FileInputStream;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.security.Key;
import java.security.KeyStore;
import java.security.cert.Certificate;
import java.security.cert.X509Certificate;
import java.util.Base64;
import java.util.Enumeration;

/*
 * @test
 * @bug 8048617
 * @author  Bill Situ
 * @summary Read different types p12 key store to Check the read related APIs.
 *  including following test cases:
 * ReadP12_IE_Chain: Read p12 key store (contains private key and associated
 *  certificate chain) from IE.
 * ReadP12_IE_Self: Read p12 key store (contains only private key and
 *  self-signed certificate) from IE.
 * ReadP12_JDK_Chain: Read p12 key store (contains private key and associated
 *  certificate chain) from JDK
 * ReadP12_JDK_Self: Read p12 key store (contains only private key and
 *  self-signed certificate) from JDK.
 * ReadP12_Mozilla_Self: Read p12 key store (contains only private key and
 *  self-signed certificate) from Mozilla.
 * ReadP12_Mozilla_Chain: Read p12 key store (contains private key and
 *  associated certificate chain) from Mozilla.
 * ReadP12_Mozilla_TwoEntries: Read p12 key store (contains 2 entries) from
 *  Mozilla.
 * ReadP12_Netscape_Chain: Read p12 key store (contains private key and
 *  associated certificate chain) from Netscape.
 * ReadP12_Netscape_Self: Read p12 key store (contains only private key and
 *  self-signed certificate) from Netscape.
 * ReadP12_Netscape_TwoEntries: Read p12 key store (contains 2 entries) from
 *  Netscape.
 * ReadP12_OpenSSL: Read p12 key store from OpenSSL.
 */

public class ReadP12Test {

    private final static String IN_KETYSTORE_TYPE = "pkcs12";
    private final static String IN_KEYSTORE_PRV = "SunJSSE";
    private final static String IN_STORE_PASS = "pass";

    public static void main(String args[]) throws Exception {

        ReadP12Test jstest = new ReadP12Test();
        String testCase = "";
        try {
            testCase = "ReadP12_IE_Chain";
            jstest.readTest("ie_chain.pfx.data");

            testCase = "ReadP12_IE_Self";
            jstest.readTest("ie_self.pfx.data");

            testCase = "ReadP12_JDK_Chain";
            jstest.readTest("jdk_chain.p12.data");

            testCase = "ReadP12_JDK_Self";
            jstest.readTest("jdk_self.p12.data");

            testCase = "ReadP12_Mozilla_Chain";
            jstest.readTest("mozilla_chain.p12.data");

            testCase = "ReadP12_Mozilla_Self";
            jstest.readTest("mozilla_self.p12.data");

            testCase = "ReadP12_Mozilla_TwoEntries";
            jstest.readTest("mozilla_twoentries.p12.data");

            testCase = "ReadP12_Netscape_Chain";
            jstest.readTest("netscape_chain.p12.data");

            testCase = "ReadP12_Netscape_Self";
            jstest.readTest("netscape_self.p12.data");

            testCase = "ReadP12_Netscape_TwoEntries";
            jstest.readTest("netscape_twoentries.p12.data");

            testCase = "ReadP12_openssl";
            jstest.readTest("openssl.p12.data");

        } catch (Exception e) {
            System.err.println(testCase + ": failed with execption: "
                    + e.getMessage());
            throw e;

        }
        out.println(testCase + ": Pass!!");
    }

    private void readTest(String inKeyStore) throws Exception {

        KeyStore inputKeyStore;

        // Initialize KeyStore
        String dir = System.getProperty("test.src", ".");
        String keystorePath = dir + File.separator + "certs" + File.separator
                + "readP12";
        inputKeyStore = KeyStore
                .getInstance(IN_KETYSTORE_TYPE, IN_KEYSTORE_PRV);
        // KeyStore have encoded by Base64.getMimeEncoder().encode(),need decode
        // first.
        byte[] input = Files.readAllBytes(Paths.get(keystorePath, inKeyStore));
        ByteArrayInputStream arrayIn = new ByteArrayInputStream(Base64
                .getMimeDecoder().decode(input));
        inputKeyStore.load(arrayIn, IN_STORE_PASS.toCharArray());
        out.println("Initialize KeyStore : " + inKeyStore + " success");

        out.println("getProvider : " + inputKeyStore.getProvider());
        out.println("getType : " + inputKeyStore.getType());
        out.println("getDefaultType : " + KeyStore.getDefaultType());

        int idx = 0;
        Enumeration<String> e = inputKeyStore.aliases();
        String alias;
        while (e.hasMoreElements()) {
            alias = e.nextElement();
            out.println("Alias " + idx + " : " + alias);
            if (inputKeyStore.containsAlias(alias) == false) {
                throw new RuntimeException("Alias not found");
            }

            out.println("getCreationDate : "
                    + inputKeyStore.getCreationDate(alias));

            X509Certificate cert = (X509Certificate) inputKeyStore
                    .getCertificate(alias);
            out.println("getCertificate : " + cert.getSubjectDN());
            String retAlias = inputKeyStore.getCertificateAlias(cert);
            if (!retAlias.equals(alias)) {
                throw new RuntimeException("Alias mismatch");
            }
            out.println("getCertificateAlias : " + retAlias);

            Certificate[] certs = inputKeyStore.getCertificateChain(alias);
            for (int i = 0; i < certs.length; i++) {
                out.println("getCertificateChain " + i + " : "
                        + ((X509Certificate) certs[i]).getSubjectDN());
            }

            boolean isCertEntry = inputKeyStore.isCertificateEntry(alias);
            // test KeyStore only contain key pair entries.
            if (isCertEntry == true) {
                throw new RuntimeException(
                        "inputKeystore should not be certEntry because test keystore only contain key pair entries.");
            }

            boolean isKeyEntry = inputKeyStore.isKeyEntry(alias);
            if (isKeyEntry) {
                Key key = inputKeyStore.getKey(alias,
                        IN_STORE_PASS.toCharArray());
                out.println("Key : " + key.toString());
            } else {
                throw new RuntimeException("Entry type unknown\n");
            }
            idx++;
        }

        int size = inputKeyStore.size();
        if (idx != size) {
            throw new RuntimeException("Size not match");
        }

    }
}