16 # 2 along with this work; if not, write to the Free Software Foundation,
17 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 #
19 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 # or visit www.oracle.com if you need additional information or have any
21 # questions.
22 #
23
24 # @test
25 # @bug 6948803
26 # @summary CertPath validation regression caused by SHA1 replacement root
27 # and MD2 disable feature
28 #
29
30 if [ "${TESTSRC}" = "" ] ; then
31 TESTSRC="."
32 fi
33 if [ "${TESTJAVA}" = "" ] ; then
34 JAVAC_CMD=`which javac`
35 TESTJAVA=`dirname $JAVAC_CMD`/..
36 fi
37
38 # set platform-dependent variables
39 OS=`uname -s`
40 case "$OS" in
41 Windows_* )
42 FS="\\"
43 ;;
44 * )
45 FS="/"
46 ;;
47 esac
48
49 KT="$TESTJAVA${FS}bin${FS}keytool -storepass changeit \
50 -keypass changeit -keystore certreplace.jks"
51 JAVAC=$TESTJAVA${FS}bin${FS}javac
52 JAVA=$TESTJAVA${FS}bin${FS}java
53
54 rm -rf certreplace.jks 2> /dev/null
55
56 # 1. Generate 3 aliases in a keystore: ca, int, user
57
58 $KT -genkeypair -alias ca -dname CN=CA -keyalg rsa -sigalg md2withrsa -ext bc
59 $KT -genkeypair -alias int -dname CN=Int -keyalg rsa
60 $KT -genkeypair -alias user -dname CN=User -keyalg rsa
61
62 # 2. Signing: ca -> int -> user
63
64 $KT -certreq -alias int | $KT -gencert -rfc -alias ca -ext bc \
65 | $KT -import -alias int
66 $KT -certreq -alias user | $KT -gencert -rfc -alias int \
67 | $KT -import -alias user
68
69 # 3. Create the certchain file
70
71 $KT -export -alias user -rfc > certreplace.certs
72 $KT -export -rfc -alias int >> certreplace.certs
73 $KT -export -rfc -alias ca >> certreplace.certs
74
75 # 4. Upgrade ca from MD2withRSA to SHA256withRSA, remove other aliases and
76 # make this keystore the cacerts file
77
78 $KT -selfcert -alias ca
79 $KT -delete -alias int
80 $KT -delete -alias user
81
82 # 5. Build and run test
83
84 $JAVAC -d . ${TESTSRC}${FS}CertReplace.java
85 $JAVA ${TESTVMOPTS} CertReplace certreplace.jks certreplace.certs
|
16 # 2 along with this work; if not, write to the Free Software Foundation,
17 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 #
19 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 # or visit www.oracle.com if you need additional information or have any
21 # questions.
22 #
23
24 # @test
25 # @bug 6948803
26 # @summary CertPath validation regression caused by SHA1 replacement root
27 # and MD2 disable feature
28 #
29
30 if [ "${TESTSRC}" = "" ] ; then
31 TESTSRC="."
32 fi
33 if [ "${TESTJAVA}" = "" ] ; then
34 JAVAC_CMD=`which javac`
35 TESTJAVA=`dirname $JAVAC_CMD`/..
36 COMPILEJAVA="${TESTJAVA}"
37 fi
38
39 # set platform-dependent variables
40 OS=`uname -s`
41 case "$OS" in
42 Windows_* )
43 FS="\\"
44 ;;
45 * )
46 FS="/"
47 ;;
48 esac
49
50 KT="$TESTJAVA${FS}bin${FS}keytool -storepass changeit \
51 -keypass changeit -keystore certreplace.jks"
52 JAVAC=$COMPILEJAVA${FS}bin${FS}javac
53 JAVA=$TESTJAVA${FS}bin${FS}java
54
55 rm -rf certreplace.jks 2> /dev/null
56
57 # 1. Generate 3 aliases in a keystore: ca, int, user
58
59 $KT -genkeypair -alias ca -dname CN=CA -keyalg rsa -sigalg md2withrsa -ext bc
60 $KT -genkeypair -alias int -dname CN=Int -keyalg rsa
61 $KT -genkeypair -alias user -dname CN=User -keyalg rsa
62
63 # 2. Signing: ca -> int -> user
64
65 $KT -certreq -alias int | $KT -gencert -rfc -alias ca -ext bc \
66 | $KT -import -alias int
67 $KT -certreq -alias user | $KT -gencert -rfc -alias int \
68 | $KT -import -alias user
69
70 # 3. Create the certchain file
71
72 $KT -export -alias user -rfc > certreplace.certs
73 $KT -export -rfc -alias int >> certreplace.certs
74 $KT -export -rfc -alias ca >> certreplace.certs
75
76 # 4. Upgrade ca from MD2withRSA to SHA256withRSA, remove other aliases and
77 # make this keystore the cacerts file
78
79 $KT -selfcert -alias ca
80 $KT -delete -alias int
81 $KT -delete -alias user
82
83 # 5. Build and run test
84
85 $JAVAC ${TESTJAVACOPTS} ${TESTTOOLVMOPTS} -d . ${TESTSRC}${FS}CertReplace.java
86 $JAVA ${TESTVMOPTS} CertReplace certreplace.jks certreplace.certs
|