/*
* Copyright (c) 2003, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* @test
* @bug 4919147
* @summary Support for token-based KeyStores
*/
import java.io.*;
import java.util.*;
import sun.security.provider.*;
public class TokenStore {
private static final String POLICY_NO_STORE =
"grant { permission java.security.AllPermission; };";
private static final String POLICY_URL =
"keystore \"file:${test.src}${/}TokenStore.keystore\";" +
"grant signedby \"POLICY_URL\" {" +
" permission java.security.AllPermission;" +
"};" ;
private static final String POLICY_URL_T =
"keystore \"file:${test.src}${/}TokenStore.keystore\", \"JKS\";"+
"grant signedby \"POLICY_URL_T\" {" +
" permission java.security.AllPermission;" +
"};" ;
private static final String POLICY_URL_T_P =
"keystore \"file:${test.src}${/}TokenStore.keystore\"," +
" \"JKS\", \"SUN\";" +
"grant signedby \"POLICY_URL_T_P\" {" +
" permission java.security.AllPermission;" +
"};" ;
private static final String POLICY_URL_PWD =
"keystore \"file:${test.src}${/}TokenStore.keystore\";" +
"keystorePasswordURL \"file:${test.src}${/}TokenStore.pwd\";" +
"grant signedby \"POLICY_URL\" {" +
" permission java.security.AllPermission;" +
"};" ;
private static final String POLICY_URL_T_P_PWD =
"keystore \"file:${test.src}${/}TokenStore.keystore\"," +
" \"JKS\", \"SUN\";" +
"keystorePasswordURL \"file:${test.src}${/}TokenStore.pwd\";" +
"grant signedby \"POLICY_URL_T_P\" {" +
" permission java.security.AllPermission;" +
"};" ;
private static final String POLICY_PASS_NO_STORE =
"keystorePasswordURL \"file:${test.src}${/}TokenStore.pwd\";" +
"grant signedby \"POLICY_URL_T_P\" {" +
" permission java.security.AllPermission;" +
"};" ;
public static void main(String[] args) throws Exception {
// test no key store in policy
PolicyParser p = new PolicyParser();
p.read(new StringReader(POLICY_NO_STORE));
doNoStore(p);
StringWriter sw = new StringWriter();
p.write(sw);
PolicyParser newP = new PolicyParser();
newP.read(new StringReader(sw.toString()));
doNoStore(p);
// test policy keystore + URL
p = new PolicyParser();
p.read(new StringReader(POLICY_URL));
doURL(p, true);
sw = new StringWriter();
p.write(sw);
newP = new PolicyParser();
newP.read(new StringReader(sw.toString()));
doURL(p, true);
// test policy keystore + URL + type
p = new PolicyParser();
p.read(new StringReader(POLICY_URL_T));
doURL_T(p, true);
sw = new StringWriter();
p.write(sw);
newP = new PolicyParser();
newP.read(new StringReader(sw.toString()));
doURL_T(p, true);
// test policy keystore + URL + type + provider
p = new PolicyParser();
p.read(new StringReader(POLICY_URL_T_P));
doURL_T_P(p, true);
sw = new StringWriter();
p.write(sw);
newP = new PolicyParser();
newP.read(new StringReader(sw.toString()));
doURL_T_P(p, true);
// test policy keystore + URL + password
p = new PolicyParser();
p.read(new StringReader(POLICY_URL_PWD));
doURL(p, false);
doPwd(p);
sw = new StringWriter();
p.write(sw);
newP = new PolicyParser();
newP.read(new StringReader(sw.toString()));
doURL(p, false);
doPwd(p);
// test policy keystore + URL + type + provider + password
p = new PolicyParser();
p.read(new StringReader(POLICY_URL_T_P_PWD));
doURL_T_P(p, false);
doPwd(p);
sw = new StringWriter();
p.write(sw);
newP = new PolicyParser();
newP.read(new StringReader(sw.toString()));
doURL_T_P(p, false);
doPwd(p);
// test policy password with no keystore
p = new PolicyParser();
try {
p.read(new StringReader(POLICY_PASS_NO_STORE));
throw new SecurityException("expected parsing exception");
} catch (PolicyParser.ParsingException pe) {
// good
}
}
private static void checkPerm(PolicyParser p) throws Exception {
Enumeration e = p.grantElements();
boolean foundOne = false;
while (e.hasMoreElements()) {
PolicyParser.GrantEntry ge = (PolicyParser.GrantEntry)
e.nextElement();
if (ge.permissionEntries == null) {
throw new SecurityException("expected non-null perms");
} else {
foundOne = true;
}
}
if (!foundOne) {
throw new SecurityException("expected non-null grant entries");
}
}
private static void doNoStore(PolicyParser p) throws Exception {
if (p.getKeyStoreUrl() != null ||
p.getKeyStoreType() != null ||
p.getKeyStoreProvider() != null ||
p.getStorePassURL() != null) {
throw new SecurityException("expected null keystore");
}
checkPerm(p);
}
private static void doURL(PolicyParser p, boolean checkPwd)
throws Exception {
if (p.getKeyStoreUrl() == null ||
!(p.getKeyStoreUrl().endsWith("TokenStore.keystore")) ||
p.getKeyStoreType() != null ||
p.getKeyStoreProvider() != null) {
throw new SecurityException("invalid keystore values");
}
if (checkPwd) {
if (p.getStorePassURL() != null) {
throw new SecurityException("invalid keystore values");
}
}
checkPerm(p);
}
private static void doURL_T(PolicyParser p, boolean checkPwd)
throws Exception {
if (p.getKeyStoreUrl() == null ||
!(p.getKeyStoreUrl().endsWith("TokenStore.keystore")) ||
p.getKeyStoreType() == null ||
!(p.getKeyStoreType().equals("JKS")) ||
p.getKeyStoreProvider() != null) {
throw new SecurityException("invalid keystore values");
}
if (checkPwd) {
if (p.getStorePassURL() != null) {
throw new SecurityException("invalid keystore values");
}
}
checkPerm(p);
}
private static void doURL_T_P(PolicyParser p, boolean checkPwd)
throws Exception {
if (p.getKeyStoreUrl() == null ||
!(p.getKeyStoreUrl().endsWith("TokenStore.keystore")) ||
p.getKeyStoreType() == null ||
!(p.getKeyStoreType().equals("JKS")) ||
p.getKeyStoreProvider() == null ||
!(p.getKeyStoreProvider().equals("SUN"))) {
throw new SecurityException("invalid keystore values");
}
if (checkPwd) {
if (p.getStorePassURL() != null) {
throw new SecurityException("invalid keystore values");
}
}
checkPerm(p);
}
private static void doPwd(PolicyParser p) throws Exception {
if (p.getStorePassURL() == null ||
!(p.getStorePassURL().endsWith("TokenStore.pwd"))) {
throw new SecurityException("invalid password values");
}
}
}