IterateWindowsRootStore.java

/*
 * Copyright (c) 2015, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

import java.io.InputStream;
import java.security.KeyStore;
import java.security.Provider;
import java.security.Security;
import java.security.cert.CRL;
import java.security.cert.CRLException;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactorySpi;
import java.util.Collection;
import java.util.Enumeration;

/*
 * @test
 * @bug 8139436
 * @summary This test validates an iteration over the Windows-ROOT certificate store
 *          and retrieving all certificates.
 *          Bug 8139436 reports an issue when 3rd party JCE providers would throw exceptions
 *          upon creating Certificate objects.
 *          This would for instance happen when using IAIK 3.15 and Elliptic Curve certificates
 *          are contained in the Windows-ROOT certificate store.
 *          The test uses a simple dummy provider which just throws Exceptions in its CertificateFactory.
 *          To test an external provider, you can use property sun.security.mscapi.testprovider and
 *          set it to the provider class name which has to be constructible by a constructor without
 *          arguments. The provider jar has to be added to the classpath.
 *          E.g. run jtreg with -javaoption:-Dsun.security.mscapi.testprovider=iaik.security.provider.IAIK and
 *          -cpa:<path to iaik_jce.jar>
 *
 * @requires os.family == "windows"
 * @author Christoph Langer
 * @run main IterateWindowsRootStore
 */
public class IterateWindowsRootStore {
    public static class TestFactory extends CertificateFactorySpi {
        @Override
        public Certificate engineGenerateCertificate(InputStream inStream) throws CertificateException {
            throw new CertificateException("unimplemented");
        }

        @Override
        public Collection<? extends Certificate> engineGenerateCertificates(InputStream inStream) throws CertificateException {
            throw new CertificateException("unimplemented");
        }

        @Override
        public CRL engineGenerateCRL(InputStream inStream) throws CRLException {
            throw new CRLException("unimplemented");
        }

        @Override
        public Collection<? extends CRL> engineGenerateCRLs(InputStream inStream) throws CRLException {
            throw new CRLException("unimplemented");
        }
    }

    public static class TestProvider extends Provider {
        private static final long serialVersionUID = 1L;

        public TestProvider() {
            super("TestProvider", 0.1, "Test provider for IterateWindowsRootStore");

            /*
             * Certificates
             */
            this.put("CertificateFactory.X.509", "IterateWindowsRootStore$TestFactory");
            this.put("Alg.Alias.CertificateFactory.X509", "X.509");
        }
    }

    public static void main(String[] args) throws Exception {
        // Try to register a JCE provider from property sun.security.mscapi.testprovider in the first slot
        // otherwise register a dummy provider which would provoke the issue of bug 8139436
        boolean providerPrepended = false;
        String testprovider = System.getProperty("sun.security.mscapi.testprovider");
        if (testprovider != null && !testprovider.isEmpty()) {
            try {
                System.out.println("Trying to prepend external JCE provider " + testprovider);
                Class<?> providerclass = Class.forName(testprovider);
                Object provider = providerclass.newInstance();
                Security.insertProviderAt((Provider)provider, 1);
            } catch (Exception e) {
                System.out.println("Could not load JCE provider " + testprovider +". Exception is:");
                e.printStackTrace(System.out);
            }
            providerPrepended = true;
            System.out.println("Sucessfully prepended JCE provider " + testprovider);
        }
        if (!providerPrepended) {
            System.out.println("Trying to prepend dummy JCE provider");
            Security.insertProviderAt(new TestProvider(), 1);
            System.out.println("Sucessfully prepended dummy JCE provider");
        }

        // load Windows-ROOT KeyStore
        KeyStore keyStore = KeyStore.getInstance("Windows-ROOT", "SunMSCAPI");
        keyStore.load(null, null);

        // iterate KeyStore
        Enumeration<String> aliases = keyStore.aliases();
        while (aliases.hasMoreElements()) {
            String alias = aliases.nextElement();
            System.out.print("Reading certificate for alias: " + alias + "...");
            keyStore.getCertificate(alias);
            System.out.println(" done.");
        }
    }
}