1 /*
2 * Copyright (c) 2009, 2020, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24 //
25 // SunJSSE does not support dynamic system properties, no way to re-use
26 // system properties in samevm/agentvm mode.
27 //
28
29 /**
30 * @test
31 * @bug 6840752 8168078
32 * @summary Provide out-of-the-box support for ECC algorithms
33 * @library /test/lib
34 * @library ../pkcs11
35 * @library ../pkcs11/ec
36 * @library ../pkcs11/sslecc
37 * @library ../../../java/security/testlibrary
38 * @library ../../../javax/net/ssl/TLSCommon
39 * @modules jdk.crypto.cryptoki/sun.security.pkcs11.wrapper
40 * @run main/othervm -Djdk.tls.namedGroups="secp256r1,sect193r1" -Djdk.sunec.disableNative=false TestEC
41 * @run main/othervm -Djava.security.policy=TestEC.policy -Djdk.tls.namedGroups="secp256r1,sect193r1" -Djdk.sunec.disableNative=false TestEC
42 */
43
44 import java.security.NoSuchProviderException;
45 import java.security.Provider;
46 import java.security.Security;
47
48 /*
49 * Leverage the collection of EC tests used by PKCS11
50 *
51 * NOTE: the following 6 files were copied here from the PKCS11 EC Test area
52 * and must be kept in sync with the originals:
53 *
54 * ../pkcs11/ec/p12passwords.txt
55 * ../pkcs11/ec/certs/sunlabscerts.pem
56 * ../pkcs11/ec/pkcs12/secp256r1server-secp384r1ca.p12
57 * ../pkcs11/ec/pkcs12/sect193r1server-rsa1024ca.p12
58 * ../pkcs11/sslecc/keystore
59 * ../pkcs11/sslecc/truststore
60 */
61
62 public class TestEC {
63
64 /*
65 * Turn on SSL debugging
66 */
67 private static final boolean debug = true;
68
69 public static void main(String[] args) throws Exception {
70 // reset security properties to make sure that the algorithms
71 // and keys used in this test are not disabled.
72 Security.setProperty("jdk.tls.disabledAlgorithms", "");
73 Security.setProperty("jdk.certpath.disabledAlgorithms", "");
74
75 if (debug) {
76 System.setProperty("javax.net.debug", "all");
77 }
78
79 ProvidersSnapshot snapshot = ProvidersSnapshot.create();
80 try {
81 main0(args);
82 } finally {
83 snapshot.restore();
84 }
85 }
86
87 public static void main0(String[] args) throws Exception {
88 Provider p = Security.getProvider("SunEC");
89
90 if (p == null) {
91 throw new NoSuchProviderException("Can't get SunEC provider");
92 }
93
94 System.out.println("Running tests with " + p.getName() +
95 " provider...\n");
96 long start = System.currentTimeMillis();
97
98 /*
99 * The entry point used for each test is its instance method
100 * called main (not its static method called main).
101 */
102 new TestECDH().main(p);
103 new TestECDSA().main(p);
104 new TestCurves().main(p);
105 new TestKeyFactory().main(p);
106 new TestECGenSpec().main(p);
107 new ReadPKCS12().main(p);
108 new ReadCertificates().main(p);
109
110 // ClientJSSEServerJSSE fails on Solaris 11 when both SunEC and
111 // SunPKCS11-Solaris providers are enabled.
112 // Workaround:
113 // Security.removeProvider("SunPKCS11-Solaris");
114 new ClientJSSEServerJSSE().main(p);
115
116 long stop = System.currentTimeMillis();
117 System.out.println("\nCompleted tests with " + p.getName() +
118 " provider (" + ((stop - start) / 1000.0) + " seconds).");
119 }
120 }