JKStoPKCS12.java

/*
 * Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

/*
 * @test
 * @bug 8010125 8192988
 * @summary keytool should support -storepasswd for pkcs12 keystores
 * @library /test/lib
 * @build jdk.test.lib.SecurityTools
 *        jdk.test.lib.Utils
 *        jdk.test.lib.Asserts
 *        jdk.test.lib.JDKToolFinder
 *        jdk.test.lib.JDKToolLauncher
 *        jdk.test.lib.Platform
 *        jdk.test.lib.process.*
 * @run main JKStoPKCS12
 */

import jdk.test.lib.Asserts;
import jdk.test.lib.SecurityTools;
import jdk.test.lib.process.OutputAnalyzer;

import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.security.KeyStore;
import java.util.Collections;

public class JKStoPKCS12 {

    static String srcStorePass, srcKeyPass;

    public static void main(String[] args) throws Exception {

        // Part 1: JKS keystore with same storepass and keypass
        genJKS("pass1111", "pass1111");

        // Change storepass, keypass also changes
        convert("pass2222", null);
        // You can keep storepass unchanged
        convert("pass1111", null);
        // Or change storepass and keypass both, explicitly
        convert("pass2222", "pass2222");

        // Part 2: JKS keystore with different storepass and keypass
        Files.delete(Paths.get("jks"));
        genJKS("pass1111", "pass2222");

        // Can use old keypass as new storepass so new storepass and keypass are same
        convert("pass2222", null);
        // Or specify both storepass and keypass to brand new ones
        convert("pass3333", "pass3333");
        // Or change storepass, keypass also changes. Remember to provide srckeypass
        convert("pass1111", null);
    }

    // Generate JKS keystore with srcStorePass and srcKeyPass
    static void genJKS(String storePass, String keyPass)
            throws Exception {
        srcStorePass = storePass;
        srcKeyPass = keyPass;
        kt("-genkeypair -keystore jks -storetype jks "
                    + "-alias me -dname CN=Me -keyalg rsa "
                    + "-storepass " + srcStorePass + " -keypass " + srcKeyPass)
                .shouldHaveExitValue(0);
    }

    // Convert JKS to PKCS12 with destStorePass and destKeyPass (optional)
    static void convert(String destStorePass, String destKeyPass)
            throws Exception {

        String cmd = "-importkeystore -noprompt"
                + " -srcstoretype jks -srckeystore jks"
                + " -destkeystore p12 -deststoretype pkcs12"
                + " -srcstorepass " + srcStorePass
                + " -deststorepass " + destStorePass;

        // Must import by alias (-srckeypass not available when importing all)
        if (!srcStorePass.equals(srcKeyPass)) {
            cmd += " -srcalias me";
            cmd += " -srckeypass " + srcKeyPass;
        }
        if (destKeyPass != null) {
            cmd += " -destkeypass " + destKeyPass;
        }

        kt(cmd).shouldHaveExitValue(0);

        // Confirms the storepass and keypass are all correct
        KeyStore.getInstance(new File("p12"), destStorePass.toCharArray())
                .getKey("me", destStorePass.toCharArray());

        Files.delete(Paths.get("p12"));
    }

    static OutputAnalyzer kt(String arg) throws Exception {
        return SecurityTools.keytool(arg);
    }
}