< prev index next >

test/sun/security/tools/jarsigner/TimestampCheck.java

Print this page
rev 16540 : 8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms


 558 
 559         gencert("old");
 560         gencert("dsakey");
 561         gencert("weakkeysize");
 562         gencert("badku", "-ext ku:critical=keyAgreement");
 563         gencert("ts", "-ext eku:critical=ts");
 564         gencert("tsweak", "-ext eku:critical=ts");
 565         gencert("tsbad1");
 566         gencert("tsbad2", "-ext eku=ts");
 567         gencert("tsbad3", "-ext eku:critical=cs");
 568     }
 569 
 570     static void gencert(String alias, String... extra) throws Exception {
 571         keytool("-alias " + alias + " -certreq -file " + alias + ".req");
 572         String genCmd = "-gencert -alias ca -infile " +
 573                 alias + ".req -outfile " + alias + ".cert";
 574         for (String s : extra) {
 575             genCmd += " " + s;
 576         }
 577         keytool(genCmd);
 578         keytool("-alias " + alias + " -importcert -file " + alias + ".cert");

 579     }
 580 
 581     static void keytool(String cmd) throws Exception {
 582         cmd = "-keystore tsks -storepass changeit -keypass changeit " +
 583                 "-keyalg rsa -validity 200 " + cmd;
 584         sun.security.tools.keytool.Main.main(cmd.split(" "));
 585     }
 586 }


 558 
 559         gencert("old");
 560         gencert("dsakey");
 561         gencert("weakkeysize");
 562         gencert("badku", "-ext ku:critical=keyAgreement");
 563         gencert("ts", "-ext eku:critical=ts");
 564         gencert("tsweak", "-ext eku:critical=ts");
 565         gencert("tsbad1");
 566         gencert("tsbad2", "-ext eku=ts");
 567         gencert("tsbad3", "-ext eku:critical=cs");
 568     }
 569 
 570     static void gencert(String alias, String... extra) throws Exception {
 571         keytool("-alias " + alias + " -certreq -file " + alias + ".req");
 572         String genCmd = "-gencert -alias ca -infile " +
 573                 alias + ".req -outfile " + alias + ".cert";
 574         for (String s : extra) {
 575             genCmd += " " + s;
 576         }
 577         keytool(genCmd);
 578         keytool("-alias " + alias + " -importcert -file "
 579                 + alias + ".cert -noprompt");
 580     }
 581 
 582     static void keytool(String cmd) throws Exception {
 583         cmd = "-keystore tsks -storepass changeit -keypass changeit " +
 584                 "-keyalg rsa -validity 200 " + cmd;
 585         sun.security.tools.keytool.Main.main(cmd.split(" "));
 586     }
 587 }
< prev index next >