1/*
2 * Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24/**
25 * @test
26 * @bug 8175029
27 * @library ../../testlibrary
28 * @summary check that default implementation of
29 *          X509CRL.verify(PublicKey, Provider) works on custom X509CRL impl.
30 */
31
32import java.math.BigInteger;
33import java.security.InvalidKeyException;
34import java.security.NoSuchAlgorithmException;
35import java.security.NoSuchProviderException;
36import java.security.Principal;
37import java.security.Provider;
38import java.security.PublicKey;
39import java.security.SignatureException;
40import java.security.cert.Certificate;
41import java.security.cert.CRLException;
42import java.security.cert.X509Certificate;
43import java.security.cert.X509CRL;
44import java.security.cert.X509CRLEntry;
45import java.util.Date;
46import java.util.Set;
47
48public class VerifyDefault {
49    private static final String TEST_CRL =
50        "-----BEGIN X509 CRL-----\n" +
51        "MIIBGzCBhQIBATANBgkqhkiG9w0BAQQFADAfMQswCQYDVQQGEwJVUzEQMA4GA1UE\n" +
52        "ChMHRXhhbXBsZRcNMDkwNDI3MDIzODA0WhcNMjgwNjI2MDIzODA0WjAiMCACAQUX\n" +
53        "DTA5MDQyNzAyMzgwMFowDDAKBgNVHRUEAwoBBKAOMAwwCgYDVR0UBAMCAQIwDQYJ\n" +
54        "KoZIhvcNAQEEBQADgYEAoarfzXEtw3ZDi4f9U8eSvRIipHSyxOrJC7HR/hM5VhmY\n" +
55        "CErChny6x9lBVg9s57tfD/P9PSzBLusCcHwHMAbMOEcTltVVKUWZnnbumpywlYyg\n" +
56        "oKLrE9+yCOkYUOpiRlz43/3vkEL5hjIKMcDSZnPKBZi1h16Yj2hPe9GMibNip54=\n" +
57        "-----END X509 CRL-----";
58
59    private static final String TEST_CERT =
60        "-----BEGIN CERTIFICATE-----\n" +
61        "MIICKzCCAZSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAfMQswCQYDVQQGEwJVUzEQ\n" +
62        "MA4GA1UEChMHRXhhbXBsZTAeFw0wOTA0MjcwMjI0MzNaFw0yOTAxMTIwMjI0MzNa\n" +
63        "MB8xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFeGFtcGxlMIGfMA0GCSqGSIb3DQEB\n" +
64        "AQUAA4GNADCBiQKBgQDMJeBMBybHykI/YpwUJ4O9euqDSLb1kpWpceBS8TVqvgBC\n" +
65        "SgUJWtFZL0i6bdvF6mMdlbuBkGzhXqHiVAi96/zRLbUC9F8SMEJ6MuD+YhQ0ZFTQ\n" +
66        "atKy8zf8O9XzztelLJ26Gqb7QPV133WY3haAqHtCXOhEKkCN16NOYNC37DTaJwID\n" +
67        "AQABo3cwdTAdBgNVHQ4EFgQULXSWzXzUOIpOJpzbSCpW42IJUugwRwYDVR0jBEAw\n" +
68        "PoAUgiXdIaZeT3QA/SGUvh854OJVyxuhI6QhMB8xCzAJBgNVBAYTAlVTMRAwDgYD\n" +
69        "VQQKEwdFeGFtcGxlggEAMAsGA1UdDwQEAwIBAjANBgkqhkiG9w0BAQQFAAOBgQAY\n" +
70        "eMnf5AHSNlyUlzXk8o2S0h4gCuvKX6C3kFfKuZcWvFAbx4yQOWLS2s15/nzR4+AP\n" +
71        "FGX3lgJjROyAh7fGedTQK+NFWwkM2ag1g3hXktnlnT1qHohi0w31nVBJxXEDO/Ck\n" +
72        "uJTpJGt8XxxbFaw5v7cHy7XuTAeU/sekvjEiNHW00Q==\n" +
73        "-----END CERTIFICATE-----";
74
75    private static class TestX509CRL extends X509CRL {
76        private final X509CRL crl;
77        TestX509CRL(X509CRL crl) {
78            this.crl = crl;
79        }
80        public Set<String> getCriticalExtensionOIDs() {
81           return crl.getCriticalExtensionOIDs();
82        }
83        public byte[] getExtensionValue(String oid) {
84            return crl.getExtensionValue(oid);
85        }
86        public Set<String> getNonCriticalExtensionOIDs() {
87            return crl.getNonCriticalExtensionOIDs();
88        }
89        public boolean hasUnsupportedCriticalExtension() {
90            return crl.hasUnsupportedCriticalExtension();
91        }
92        public Set<? extends X509CRLEntry> getRevokedCertificates() {
93            return crl.getRevokedCertificates();
94        }
95        public X509CRLEntry getRevokedCertificate(BigInteger serialNumber) {
96            return crl.getRevokedCertificate(serialNumber);
97        }
98        public boolean isRevoked(Certificate cert) {
99            return crl.isRevoked(cert);
100        }
101        public Date getNextUpdate() { return crl.getNextUpdate(); }
102        public Date getThisUpdate() { return crl.getThisUpdate(); }
103        public int getVersion() { return crl.getVersion(); }
104        public Principal getIssuerDN() { return crl.getIssuerDN(); }
105        public byte[] getTBSCertList() throws CRLException {
106            return crl.getTBSCertList();
107        }
108        public byte[] getSignature() { return crl.getSignature(); }
109        public String getSigAlgName() { return crl.getSigAlgName(); }
110        public String getSigAlgOID() { return crl.getSigAlgOID(); }
111        public byte[] getSigAlgParams() { return crl.getSigAlgParams(); }
112        public byte[] getEncoded() throws CRLException {
113            return crl.getEncoded();
114        }
115        public void verify(PublicKey key) throws CRLException,
116            InvalidKeyException, NoSuchAlgorithmException,
117            NoSuchProviderException, SignatureException {
118            crl.verify(key);
119        }
120        public void verify(PublicKey key, String sigProvider) throws
121            CRLException, InvalidKeyException, NoSuchAlgorithmException,
122            NoSuchProviderException, SignatureException {
123            crl.verify(key, sigProvider);
124        }
125        public String toString() { return crl.toString(); }
126    }
127
128    public static void main(String[] args) throws Exception {
129        X509Certificate cert = CertUtils.getCertFromString(TEST_CERT);
130        X509CRL crl = CertUtils.getCRLFromString(TEST_CRL);
131        new TestX509CRL(crl).verify(cert.getPublicKey(), (Provider)null);
132    }
133}
134