StartDateTest.java

/*
 * Copyright (c) 2007, 2013, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

/*
 * @test
 * @bug 6468285
 * @summary keytool ability to backdate self-signed certificates to compensate for clock skew
 * @modules java.base/sun.security.tools.keytool:+open
 * @run main StartDateTest
 */

import java.io.File;
import java.io.FileInputStream;
import java.lang.reflect.Method;
import java.security.KeyStore;
import java.security.cert.X509Certificate;
import java.util.Calendar;
import java.util.Date;
import java.util.GregorianCalendar;

public class StartDateTest {
    public static void main(String[] args) throws Exception {

        // Part 1: Test function
        Calendar cal = new GregorianCalendar();
        int year = cal.get(Calendar.YEAR);
        int month = cal.get(Calendar.MONTH);

        new File("jks").delete();

        run("one", "+1y");
        cal.setTime(getIssueDate("one"));
        System.out.println(cal);
        if (cal.get(Calendar.YEAR) != year + 1) {
            throw new Exception("Function check #1 fails");
        }

        run("two", "+1m");
        cal.setTime(getIssueDate("two"));
        System.out.println(cal);
        if (cal.get(Calendar.MONTH) != (month + 1) % 12) {
            throw new Exception("Function check #2 fails");
        }

        run("three", "2009/10/11 12:34:56");
        cal.setTime(getIssueDate("three"));
        System.out.println(cal);
        if (cal.get(Calendar.YEAR) != 2009 ||
                cal.get(Calendar.MONTH) != Calendar.OCTOBER ||
                cal.get(Calendar.DAY_OF_MONTH) != 11 ||
                cal.get(Calendar.HOUR_OF_DAY) != 12 ||
                cal.get(Calendar.MINUTE) != 34 ||
                cal.get(Calendar.SECOND) != 56) {
            throw new Exception("Function check #3 fails");
        }

        // Part 2: Test format
        Method m = sun.security.tools.keytool.Main.class.getDeclaredMethod(
                   "getStartDate", String.class);
        m.setAccessible(true);
        for (String s: new String[] {
                null,       //NOW!
                "+1m+1d",
                "+1y-1m+1d",
                "+3H",
                "+1M",
                "-5M",
                "+011d",
                "+22S",
                "+500S",
                "2001/01/01",
                "15:15:15",
                "2001/01/01 11:11:11",
                }) {
            try {
                System.out.println(s + " " + m.invoke(null, s));
            } catch (Exception e) {
                e.printStackTrace();
                throw new Exception("Failed at " + s);
            }
        }
        for (String s: new String[] {
                "",         // empty
                "+3",
                "+3m+",
                "+3m+3",
                "1m",       // no sign
                "+0x011d",  // hex number
                "+1m1d",    // no sign for the 2nd sub value
                "m",
                "+1h",      // h is not H
                "-1m1d",
                "-m",
                "x",
                "+1m +1d",
                "2007/07",
                "01:01",
                "+01:01:01",                // what's this?
                "1:01:01",
                "12pm",
                "2007/07/07  12:12:12",     // extra blank between
                "2001/01/01-11:11:11",
                "2007-07-07",               // non-standard date delim
                "2007/7/7",                 // no padding
                "07/07/07",                 // year's length not 4
                "1:1:1",
                }) {
            boolean failed = false;
            try {
                System.out.println(m.invoke(null, s));
            } catch (Exception e) {
                System.out.println(s + " " + e.getCause());
                failed = true;
            }
            if (!failed) throw new Exception("Failed at " + s);
        }
    }

    // The keytool command line template, alias and startdate TBD
    static String[] cmd = ("-alias tbd -startdate tbd -keystore jks " +
            "-storetype jks -storepass changeit -keypass changeit " +
            "-keyalg rsa -genkeypair -dname CN=Haha -debug").split(" ");

    static void run(String alias, String startDate) throws Exception {
        cmd[1] = alias;
        cmd[3] = startDate;
        sun.security.tools.keytool.Main.main(cmd);
    }

    static Date getIssueDate(String alias) throws Exception {
        KeyStore ks = KeyStore.getInstance("jks");
        try (FileInputStream fis = new FileInputStream("jks")) {
            ks.load(fis, "changeit".toCharArray());
        }
        X509Certificate cert = (X509Certificate)ks.getCertificate(alias);
        return cert.getNotBefore();
    }
}