1 /*
2 * Copyright (c) 2013, 2015, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24 import java.util.Date;
25 import jdk.testlibrary.OutputAnalyzer;
26 import jdk.testlibrary.ProcessTools;
27 import jdk.testlibrary.JarUtils;
28
29 /**
30 * @test
31 * @bug 8024302 8026037
32 * @summary Checks warnings if -tsa and -tsacert options are not specified
33 * @library /lib/testlibrary ../
34 * @run main NoTimestampTest
35 */
36 public class NoTimestampTest extends Test {
37
38 /**
39 * The test signs and verifies a jar file without -tsa and -tsacert options,
40 * and checks that proper warnings are shown.
41 */
42 public static void main(String[] args) throws Throwable {
43 NoTimestampTest test = new NoTimestampTest();
44 test.start();
45 }
46
47 @Override
48 protected void cleanup() {
49 Utils.cleanup(SIGNED_JARFILE, UNSIGNED_JARFILE, KEYSTORE, FIRST_FILE);
50 }
51
52 @Override
53 protected void doTest() throws Throwable {
54 String timezone = System.getProperty("user.timezone");
55 System.out.println(String.format("Timezone = %s", timezone));
56
57 // create a jar file that contains one class file
58 Utils.createFiles(FIRST_FILE);
59 JarUtils.createJar(UNSIGNED_JARFILE, FIRST_FILE);
60
61 // calculate certificate expiration date
62 Date expirationDate = new Date(System.currentTimeMillis() + VALIDITY
63 * 24 * 60 * 60 * 1000L);
64
65 // create key pair
66 ProcessTools.executeCommand(KEYTOOL,
67 "-genkey",
68 "-alias", KEY_ALIAS,
69 "-keyalg", KEY_ALG,
70 "-keysize", Integer.toString(KEY_SIZE),
71 "-keystore", KEYSTORE,
72 "-storepass", PASSWORD,
73 "-keypass", PASSWORD,
74 "-dname", "CN=Test",
75 "-validity", Integer.toString(VALIDITY));
76
77 // sign jar file
78 OutputAnalyzer analyzer = ProcessTools.executeCommand(JARSIGNER,
79 "-J-Duser.timezone=" + timezone,
80 "-keystore", KEYSTORE,
81 "-storepass", PASSWORD,
82 "-keypass", PASSWORD,
83 "-signedjar", SIGNED_JARFILE,
84 UNSIGNED_JARFILE,
85 KEY_ALIAS);
86
87 String warning = String.format(NO_TIMESTAMP_SIGNING_WARN_TEMPLATE,
88 expirationDate);
89 checkSigning(analyzer, warning);
90
91 // verify signed jar
92 analyzer = ProcessTools.executeCommand(JARSIGNER,
93 "-J-Duser.timezone=" + timezone,
94 "-verify",
95 "-keystore", KEYSTORE,
96 "-storepass", PASSWORD,
97 "-keypass", PASSWORD,
98 SIGNED_JARFILE,
99 KEY_ALIAS);
100
101 warning = String.format(NO_TIMESTAMP_VERIFYING_WARN_TEMPLATE, expirationDate);
102 checkVerifying(analyzer, 0, warning);
103
104 // verify signed jar in strict mode
105 analyzer = ProcessTools.executeCommand(JARSIGNER,
106 "-J-Duser.timezone=" + timezone,
107 "-verify",
108 "-strict",
109 "-keystore", KEYSTORE,
110 "-storepass", PASSWORD,
111 "-keypass", PASSWORD,
112 SIGNED_JARFILE,
113 KEY_ALIAS);
114
115 checkVerifying(analyzer, 0, warning);
116
117 System.out.println("Test passed");
118 }
119
120 }