CachedCertPathValidatorTest.java

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.waveprotocol.wave.crypto;

import com.google.common.collect.Lists;

import junit.framework.TestCase;

import java.security.cert.X509Certificate;
import java.util.List;


public class CachedCertPathValidatorTest extends TestCase {

  private FakeTimeSource timeSource;
  private CachedCertPathValidator validator;
  private VerifiedCertChainCache cache;
  private final List<X509Certificate> serverChain = Lists.newArrayList(
      CertConstantUtil.SERVER_PUB_CERT, CertConstantUtil.INTERMEDIATE_PUB_CERT);

  @Override
  public void setUp() throws Exception {
    timeSource = new FakeTimeSource(1233465103000L); // Jan 31, 2009
    cache = new DefaultCacheImpl(timeSource);
    validator = new CachedCertPathValidator(cache, timeSource,
        new FakeTrustRootsProvider(CertConstantUtil.CA_PUB_CERT));
  }

  public void testVerify() throws Exception {
    validator.validate(serverChain);
  }

  public void testOutOfOrder() throws Exception {
    try {
      validator.validate(Lists.newArrayList(
          CertConstantUtil.INTERMEDIATE_PUB_CERT,
          CertConstantUtil.SERVER_PUB_CERT));
      fail("Should have thrown, certs out of order");
    } catch (SignatureException e) {
      // good
    }
  }

  public void testIncomplete() throws Exception {
    try {
      validator.validate(Lists.newArrayList(CertConstantUtil.SERVER_PUB_CERT));
      fail("Should have thrown, cert chain incomplete.");
    } catch (SignatureException e) {
      // good
    }
  }

  public void testExpired() throws Exception {
    timeSource.advanceSeconds(1800L * 24 * 60 * 60); // 1800 days
    validator.validate(serverChain);
    timeSource.advanceSeconds(2000L * 24 * 60 * 60); // 2000 days
    try {
      validator.validate(serverChain);
      fail("Should have thrown, cert expired");
    } catch (SignatureException e) {
      // good
    }
  }

  public void testSpeed() throws Exception {
    long start = System.currentTimeMillis();
    long ops = 0;
    while (System.currentTimeMillis() < start + 1000L) {
      validator.validate(serverChain);
      ++ops;
    }
    long stop = System.currentTimeMillis();
    System.out.println(ops/(stop-start) + " ops per ms");
  }
}