1/* 2 * Copyright (c) 2009, 2011, Oracle and/or its affiliates. All rights reserved. 3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 4 * 5 * This code is free software; you can redistribute it and/or modify it 6 * under the terms of the GNU General Public License version 2 only, as 7 * published by the Free Software Foundation. 8 * 9 * This code is distributed in the hope that it will be useful, but WITHOUT 10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 12 * version 2 for more details (a copy is included in the LICENSE file that 13 * accompanied this code). 14 * 15 * You should have received a copy of the GNU General Public License version 16 * 2 along with this work; if not, write to the Free Software Foundation, 17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 18 * 19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA 20 * or visit www.oracle.com if you need additional information or have any 21 * questions. 22 */ 23/* 24 * @test 25 * @bug 6867665 26 * @bug 6875033 27 * @modules java.security.jgss/sun.security.krb5 28 * java.security.jgss/sun.security.krb5.internal.ktab 29 * @run main/othervm HighestKvno 30 * @summary Problem with keytabs with multiple kvno's (key versions) 31 */ 32 33import sun.security.krb5.internal.ktab.*; 34import sun.security.krb5.*; 35import java.io.File; 36import java.io.FileOutputStream; 37 38public class HighestKvno { 39 40 public static void main(String[] args) throws Exception { 41 // kt is a keytab including these entries: 42 // 43 // me@MAD.LOCAL: Type: 3, KVNO: 4 44 // me@MAD.LOCAL: Type: 23, KVNO: 4 45 // me@MAD.LOCAL: Type: 16, KVNO: 4 46 // me@MAD.LOCAL: Type: 1, KVNO: 5 47 // me@MAD.LOCAL: Type: 17, KVNO: 5 48 // me@MAD.LOCAL: Type: 18, KVNO: 5 49 // me@MAD.LOCAL: Type: 1, KVNO: 3 50 // me@MAD.LOCAL: Type: 17, KVNO: 3 51 // me@MAD.LOCAL: Type: 18, KVNO: 3 52 // he@MAD.LOCAL: Type: 1, KVNO: 1 53 // he@MAD.LOCAL: Type: 17, KVNO: 1 54 // he@MAD.LOCAL: Type: 18, KVNO: 1 55 // 56 // This file is created with these steps: 57 // 1. Modify JRE's Ktab.java so that adding new entries 58 // does not remove the old one. 59 // 2. Run the modified Ktab to create 4 sets of keys 60 // 3. Manually hex edit the KVNO as above 61 62 byte[] kt = { 63 (byte)0x05, (byte)0x02, (byte)0x00, (byte)0x00, 64 (byte)0x00, (byte)0x26, (byte)0x00, (byte)0x01, 65 (byte)0x00, (byte)0x09, (byte)0x4D, (byte)0x41, 66 (byte)0x44, (byte)0x2E, (byte)0x4C, (byte)0x4F, 67 (byte)0x43, (byte)0x41, (byte)0x4C, (byte)0x00, 68 (byte)0x02, (byte)0x6D, (byte)0x65, (byte)0x00, 69 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x4A, 70 (byte)0x79, (byte)0x45, (byte)0xCD, (byte)0x04, 71 (byte)0x00, (byte)0x03, (byte)0x00, (byte)0x08, 72 (byte)0xE6, (byte)0xB0, (byte)0x07, (byte)0xA8, 73 (byte)0x5B, (byte)0xF8, (byte)0x73, (byte)0xAD, 74 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x2E, 75 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x09, 76 (byte)0x4D, (byte)0x41, (byte)0x44, (byte)0x2E, 77 (byte)0x4C, (byte)0x4F, (byte)0x43, (byte)0x41, 78 (byte)0x4C, (byte)0x00, (byte)0x02, (byte)0x6D, 79 (byte)0x65, (byte)0x00, (byte)0x00, (byte)0x00, 80 (byte)0x00, (byte)0x4A, (byte)0x79, (byte)0x45, 81 (byte)0xCD, (byte)0x04, (byte)0x00, (byte)0x17, 82 (byte)0x00, (byte)0x10, (byte)0x50, (byte)0x92, 83 (byte)0x01, (byte)0x6B, (byte)0xCF, (byte)0x5A, 84 (byte)0x2A, (byte)0x7A, (byte)0x4F, (byte)0xE8, 85 (byte)0x39, (byte)0xD9, (byte)0x90, (byte)0xB5, 86 (byte)0x9C, (byte)0xEB, (byte)0x00, (byte)0x00, 87 (byte)0x00, (byte)0x36, (byte)0x00, (byte)0x01, 88 (byte)0x00, (byte)0x09, (byte)0x4D, (byte)0x41, 89 (byte)0x44, (byte)0x2E, (byte)0x4C, (byte)0x4F, 90 (byte)0x43, (byte)0x41, (byte)0x4C, (byte)0x00, 91 (byte)0x02, (byte)0x6D, (byte)0x65, (byte)0x00, 92 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x4A, 93 (byte)0x79, (byte)0x45, (byte)0xCD, (byte)0x04, 94 (byte)0x00, (byte)0x10, (byte)0x00, (byte)0x18, 95 (byte)0xDF, (byte)0xDF, (byte)0x62, (byte)0x86, 96 (byte)0x37, (byte)0xCE, (byte)0x29, (byte)0xBA, 97 (byte)0xBC, (byte)0x23, (byte)0x15, (byte)0xDC, 98 (byte)0x86, (byte)0x7C, (byte)0xB6, (byte)0x89, 99 (byte)0x25, (byte)0x25, (byte)0xCD, (byte)0x4A, 100 (byte)0x9B, (byte)0xCE, (byte)0xF4, (byte)0xAE, 101 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x26, 102 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x09, 103 (byte)0x4D, (byte)0x41, (byte)0x44, (byte)0x2E, 104 (byte)0x4C, (byte)0x4F, (byte)0x43, (byte)0x41, 105 (byte)0x4C, (byte)0x00, (byte)0x02, (byte)0x6D, 106 (byte)0x65, (byte)0x00, (byte)0x00, (byte)0x00, 107 (byte)0x00, (byte)0x4A, (byte)0x79, (byte)0x4B, 108 (byte)0x5E, (byte)0x05, (byte)0x00, (byte)0x01, 109 (byte)0x00, (byte)0x08, (byte)0xE6, (byte)0xB0, 110 (byte)0x07, (byte)0xA8, (byte)0x5B, (byte)0xF8, 111 (byte)0x73, (byte)0xAD, (byte)0x00, (byte)0x00, 112 (byte)0x00, (byte)0x2E, (byte)0x00, (byte)0x01, 113 (byte)0x00, (byte)0x09, (byte)0x4D, (byte)0x41, 114 (byte)0x44, (byte)0x2E, (byte)0x4C, (byte)0x4F, 115 (byte)0x43, (byte)0x41, (byte)0x4C, (byte)0x00, 116 (byte)0x02, (byte)0x6D, (byte)0x65, (byte)0x00, 117 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x4A, 118 (byte)0x79, (byte)0x4B, (byte)0x5E, (byte)0x05, 119 (byte)0x00, (byte)0x11, (byte)0x00, (byte)0x10, 120 (byte)0xEA, (byte)0xF5, (byte)0xA8, (byte)0x36, 121 (byte)0xA5, (byte)0x3E, (byte)0x5F, (byte)0x5C, 122 (byte)0x26, (byte)0xE9, (byte)0xDD, (byte)0x8B, 123 (byte)0x8C, (byte)0xE8, (byte)0x92, (byte)0x9C, 124 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x3E, 125 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x09, 126 (byte)0x4D, (byte)0x41, (byte)0x44, (byte)0x2E, 127 (byte)0x4C, (byte)0x4F, (byte)0x43, (byte)0x41, 128 (byte)0x4C, (byte)0x00, (byte)0x02, (byte)0x6D, 129 (byte)0x65, (byte)0x00, (byte)0x00, (byte)0x00, 130 (byte)0x00, (byte)0x4A, (byte)0x79, (byte)0x4B, 131 (byte)0x5E, (byte)0x05, (byte)0x00, (byte)0x12, 132 (byte)0x00, (byte)0x20, (byte)0x68, (byte)0xBE, 133 (byte)0xD4, (byte)0x17, (byte)0x3A, (byte)0x06, 134 (byte)0xE0, (byte)0x0C, (byte)0x62, (byte)0x11, 135 (byte)0xB7, (byte)0x53, (byte)0x1B, (byte)0x3E, 136 (byte)0xB2, (byte)0x6B, (byte)0x0D, (byte)0x48, 137 (byte)0xD8, (byte)0x52, (byte)0x5A, (byte)0x4C, 138 (byte)0xBE, (byte)0x24, (byte)0xBB, (byte)0x3D, 139 (byte)0xC1, (byte)0x74, (byte)0x69, (byte)0xDA, 140 (byte)0x34, (byte)0x98, (byte)0x00, (byte)0x00, 141 (byte)0x00, (byte)0x26, (byte)0x00, (byte)0x01, 142 (byte)0x00, (byte)0x09, (byte)0x4D, (byte)0x41, 143 (byte)0x44, (byte)0x2E, (byte)0x4C, (byte)0x4F, 144 (byte)0x43, (byte)0x41, (byte)0x4C, (byte)0x00, 145 (byte)0x02, (byte)0x6D, (byte)0x65, (byte)0x00, 146 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x4A, 147 (byte)0x79, (byte)0x51, (byte)0x27, (byte)0x03, 148 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x08, 149 (byte)0xE6, (byte)0xB0, (byte)0x07, (byte)0xA8, 150 (byte)0x5B, (byte)0xF8, (byte)0x73, (byte)0xAD, 151 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x2E, 152 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x09, 153 (byte)0x4D, (byte)0x41, (byte)0x44, (byte)0x2E, 154 (byte)0x4C, (byte)0x4F, (byte)0x43, (byte)0x41, 155 (byte)0x4C, (byte)0x00, (byte)0x02, (byte)0x6D, 156 (byte)0x65, (byte)0x00, (byte)0x00, (byte)0x00, 157 (byte)0x00, (byte)0x4A, (byte)0x79, (byte)0x51, 158 (byte)0x27, (byte)0x03, (byte)0x00, (byte)0x11, 159 (byte)0x00, (byte)0x10, (byte)0xEA, (byte)0xF5, 160 (byte)0xA8, (byte)0x36, (byte)0xA5, (byte)0x3E, 161 (byte)0x5F, (byte)0x5C, (byte)0x26, (byte)0xE9, 162 (byte)0xDD, (byte)0x8B, (byte)0x8C, (byte)0xE8, 163 (byte)0x92, (byte)0x9C, (byte)0x00, (byte)0x00, 164 (byte)0x00, (byte)0x3E, (byte)0x00, (byte)0x01, 165 (byte)0x00, (byte)0x09, (byte)0x4D, (byte)0x41, 166 (byte)0x44, (byte)0x2E, (byte)0x4C, (byte)0x4F, 167 (byte)0x43, (byte)0x41, (byte)0x4C, (byte)0x00, 168 (byte)0x02, (byte)0x6D, (byte)0x65, (byte)0x00, 169 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x4A, 170 (byte)0x79, (byte)0x51, (byte)0x27, (byte)0x03, 171 (byte)0x00, (byte)0x12, (byte)0x00, (byte)0x20, 172 (byte)0x68, (byte)0xBE, (byte)0xD4, (byte)0x17, 173 (byte)0x3A, (byte)0x06, (byte)0xE0, (byte)0x0C, 174 (byte)0x62, (byte)0x11, (byte)0xB7, (byte)0x53, 175 (byte)0x1B, (byte)0x3E, (byte)0xB2, (byte)0x6B, 176 (byte)0x0D, (byte)0x48, (byte)0xD8, (byte)0x52, 177 (byte)0x5A, (byte)0x4C, (byte)0xBE, (byte)0x24, 178 (byte)0xBB, (byte)0x3D, (byte)0xC1, (byte)0x74, 179 (byte)0x69, (byte)0xDA, (byte)0x34, (byte)0x98, 180 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x26, 181 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x09, 182 (byte)0x4D, (byte)0x41, (byte)0x44, (byte)0x2E, 183 (byte)0x4C, (byte)0x4F, (byte)0x43, (byte)0x41, 184 (byte)0x4C, (byte)0x00, (byte)0x02, (byte)0x68, 185 (byte)0x65, (byte)0x00, (byte)0x00, (byte)0x00, 186 (byte)0x00, (byte)0x4A, (byte)0x79, (byte)0x54, 187 (byte)0xC7, (byte)0x01, (byte)0x00, (byte)0x01, 188 (byte)0x00, (byte)0x08, (byte)0x85, (byte)0x5B, 189 (byte)0xE3, (byte)0x13, (byte)0x3E, (byte)0xF8, 190 (byte)0x76, (byte)0xEC, (byte)0x00, (byte)0x00, 191 (byte)0x00, (byte)0x2E, (byte)0x00, (byte)0x01, 192 (byte)0x00, (byte)0x09, (byte)0x4D, (byte)0x41, 193 (byte)0x44, (byte)0x2E, (byte)0x4C, (byte)0x4F, 194 (byte)0x43, (byte)0x41, (byte)0x4C, (byte)0x00, 195 (byte)0x02, (byte)0x68, (byte)0x65, (byte)0x00, 196 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x4A, 197 (byte)0x79, (byte)0x54, (byte)0xC7, (byte)0x01, 198 (byte)0x00, (byte)0x11, (byte)0x00, (byte)0x10, 199 (byte)0xEC, (byte)0xCC, (byte)0x16, (byte)0xCD, 200 (byte)0xE8, (byte)0x51, (byte)0x46, (byte)0x4C, 201 (byte)0x1B, (byte)0x57, (byte)0xAE, (byte)0x19, 202 (byte)0xC3, (byte)0xD2, (byte)0x55, (byte)0x1B, 203 (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x3E, 204 (byte)0x00, (byte)0x01, (byte)0x00, (byte)0x09, 205 (byte)0x4D, (byte)0x41, (byte)0x44, (byte)0x2E, 206 (byte)0x4C, (byte)0x4F, (byte)0x43, (byte)0x41, 207 (byte)0x4C, (byte)0x00, (byte)0x02, (byte)0x68, 208 (byte)0x65, (byte)0x00, (byte)0x00, (byte)0x00, 209 (byte)0x00, (byte)0x4A, (byte)0x79, (byte)0x54, 210 (byte)0xC7, (byte)0x01, (byte)0x00, (byte)0x12, 211 (byte)0x00, (byte)0x20, (byte)0xAE, (byte)0xBA, 212 (byte)0xCB, (byte)0xF5, (byte)0xA8, (byte)0x09, 213 (byte)0xC1, (byte)0xB0, (byte)0x2C, (byte)0x2A, 214 (byte)0x3D, (byte)0x96, (byte)0x2C, (byte)0x2D, 215 (byte)0xF5, (byte)0xFE, (byte)0x65, (byte)0xEC, 216 (byte)0x75, (byte)0x72, (byte)0x5B, (byte)0x46, 217 (byte)0x84, (byte)0xD7, (byte)0x49, (byte)0x3E, 218 (byte)0xF2, (byte)0x27, (byte)0x32, (byte)0x69, 219 (byte)0x75, (byte)0x9B, 220 }; 221 System.setProperty("java.security.krb5.conf", 222 new File(System.getProperty("test.src"), 223 "../krb5.conf").getAbsolutePath()); 224 FileOutputStream fout = new FileOutputStream("kt"); 225 fout.write(kt); 226 fout.close(); 227 KeyTab ktab = KeyTab.getInstance("kt"); 228 PrincipalName pn = new PrincipalName("me@MAD.LOCAL"); 229 EncryptionKey[] keys = ktab.readServiceKeys(pn); 230 if (keys[0].getKeyVersionNumber() != 5) { 231 throw new Exception("Highest not first"); 232 } 233 new File("kt").delete(); 234 } 235} 236