CaseSensitiveAliases.java

/*
 * Copyright (c) 2004, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

/*
 * @test
 * @bug     5091374 5100603
 * @summary make sure the JKS case sensitivity works correctly
 * @author  Andreas Sterbenz
 */

import java.io.*;
import java.util.*;

import java.security.*;
import java.security.cert.*;
import java.security.cert.Certificate;

public class CaseSensitiveAliases {

    // some arbitrary certs

    private final static String S1 =
"-----BEGIN CERTIFICATE-----\n" +
"MIIB4DCCAYoCAQEwDQYJKoZIhvcNAQEEBQAwezELMAkGA1UEBhMCVVMxCzAJBgNV" +
"BAgTAkNBMRIwEAYDVQQHEwlDdXBlcnRpbm8xGTAXBgNVBAoTEFN1biBNaWNyb3N5" +
"c3RlbXMxFjAUBgNVBAsTDUphdmEgU29mdHdhcmUxGDAWBgNVBAMTD0pDRSBEZXZl" +
"bG9wbWVudDAeFw0wMjEwMzExNTI3NDRaFw0wNzEwMzExNTI3NDRaMHsxCzAJBgNV" +
"BAYTAlVTMQswCQYDVQQIEwJDQTESMBAGA1UEBxMJQ3VwZXJ0aW5vMRkwFwYDVQQK" +
"ExBTdW4gTWljcm9zeXN0ZW1zMRYwFAYDVQQLEw1KYXZhIFNvZnR3YXJlMRgwFgYD" +
"VQQDEw9KQ0UgRGV2ZWxvcG1lbnQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAo/4C" +
"ddEOa3M6v9JFAhnBYgTq54Y30++F8yzCK9EeYaG3AzvzZqNshDy579647p0cOM/4" +
"VO6rU2PgbzgKXPcs8wIDAQABMA0GCSqGSIb3DQEBBAUAA0EACqPlFmVdKdYSCTNl" +
"tXKQnBqss9GNjbnB+CitvWrwN+oOK8qQpvV+5LB6LruvRy6zCedCV95Z2kXKg/Fn" +
"j0gvsg==\n" +
"-----END CERTIFICATE-----";

    private final static String S2 =
"-----BEGIN CERTIFICATE-----\n" +
"MIIB4DCCAYoCAQIwDQYJKoZIhvcNAQEEBQAwezELMAkGA1UEBhMCVVMxCzAJBgNV" +
"BAgTAkNBMRIwEAYDVQQHEwlDdXBlcnRpbm8xGTAXBgNVBAoTEFN1biBNaWNyb3N5" +
"c3RlbXMxFjAUBgNVBAsTDUphdmEgU29mdHdhcmUxGDAWBgNVBAMTD0pDRSBEZXZl" +
"bG9wbWVudDAeFw0wMjEwMzExNTI3NDRaFw0wNzEwMzExNTI3NDRaMHsxCzAJBgNV" +
"BAYTAlVTMQswCQYDVQQIEwJDQTESMBAGA1UEBxMJQ3VwZXJ0aW5vMRkwFwYDVQQK" +
"ExBTdW4gTWljcm9zeXN0ZW1zMRYwFAYDVQQLEw1KYXZhIFNvZnR3YXJlMRgwFgYD" +
"VQQDEw9KQ0UgRGV2ZWxvcG1lbnQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAr1OS" +
"XaOzpnVoqL2LqS5+HLy1kVvBwiM/E5iYT9eZaghE8qvF+4fETipWUNTWCQzHR4cD" +
"JGJOl9Nm77tELhES4QIDAQABMA0GCSqGSIb3DQEBBAUAA0EAL+WcVFyj+iXlEVNV" +
"QbNOOUlWmlmXGiNKKXnIdNcc1ZUyi+JW0zmlfZ7iU/eRYhEEJBwdrUoyiGOGLo7p" +
"i6JzAA==\n" +
"-----END CERTIFICATE-----";

    private static CertificateFactory cf;

    private static X509Certificate parseCert(String s) throws Exception {
        if (cf == null) {
            cf = CertificateFactory.getInstance("X.509");
        }
        InputStream in = new ByteArrayInputStream(s.getBytes("UTF8"));
        return (X509Certificate)cf.generateCertificate(in);
    }

    public static void main(String[] args) throws Exception {
        main("JKS", true);
        main("CaseExactJKS", false);
    }

    private static void main(String jks, boolean caseInsensitive) throws Exception {
        X509Certificate c1 = parseCert(S1);
        X509Certificate c2 = parseCert(S2);
        X509Certificate[] a1 = {c1};
        X509Certificate[] a2 = {c2};

        KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA");
        kpg.initialize(512);
        PrivateKey p1 = kpg.generateKeyPair().getPrivate();
        PrivateKey p2 = kpg.generateKeyPair().getPrivate();

        KeyStore ks = KeyStore.getInstance(jks);
        ks.load(null, null);

        char[] pw = "pw".toCharArray();

        ks.setKeyEntry("Alias", p1, pw, a1);
        ks.setKeyEntry("ALIAS", p2, pw, a2);

        if (caseInsensitive) {
            if (ks.size() != 1) {
                throw new Exception("size mismatch: " + ks.size());
            }
            match(p2, ks.getKey("alias", pw));
            match(p2, ks.getKey("Alias", pw));
            match(p2, ks.getKey("ALIAS", pw));
            match(a2, ks.getCertificateChain("alias"));
            match(a2, ks.getCertificateChain("Alias"));
            match(a2, ks.getCertificateChain("ALIAS"));
        } else {
            if (ks.size() != 2) {
                throw new Exception("size mismatch: " + ks.size());
            }
            match(null, ks.getKey("alias", pw));
            match(p1, ks.getKey("Alias", pw));
            match(p2, ks.getKey("ALIAS", pw));
            match(null, ks.getCertificateChain("alias"));
            match(a1, ks.getCertificateChain("Alias"));
            match(a2, ks.getCertificateChain("ALIAS"));
        }

        System.out.println("OK: " + jks);
    }

    private static void match(Key p1, Key p2) throws Exception {
        System.out.println(String.valueOf(p2).split("\\n")[0]);
        if ((p1 != p2) && (p1.equals(p2) == false)) {
            throw new Exception("Private key mismatch");
        }
    }

    private static void match(Certificate[] a1, Certificate[] a2) throws Exception {
        System.out.println(String.valueOf(a2).split("\\n")[0]);
        if ((a1 != a2) && (Arrays.equals(a1, a2) == false)) {
            throw new Exception("chain mismatch");
        }
    }

}