Parse.java

/*
 * Copyright (c) 2013, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

/*
 * @test
 * @bug 8005389
 * @summary CRL Distribution Point URIs with spaces or backslashes should
 *          not be parseable
 * @modules java.base/sun.security.util
 *          java.base/sun.security.x509
 */
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import sun.security.util.DerValue;
import sun.security.x509.CRLDistributionPointsExtension;
import sun.security.x509.URIName;


public class Parse {

    // certificate with a space in the CRLDistributionPointsExtension uri
    // uri: file://crl file.crl
    static String certWithSpaceInCDPStr =
        "-----BEGIN CERTIFICATE-----\n" +
        "MIIB8DCCAVmgAwIBAgIJAOgNnYA5nHtQMA0GCSqGSIb3DQEBBQUAMCUxETAPBgNV\n" +
        "BAMTCHRlc3RuYW1lMRAwDgYDVQQLEwd0ZXN0b3JnMB4XDTEyMDgxMzIzMzgzN1oX\n" +
        "DTEyMDkxMjIzMzgzN1owJTERMA8GA1UEAxMIdGVzdG5hbWUxEDAOBgNVBAsTB3Rl\n" +
        "c3RvcmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANx02RuD/Y2pvgVnXBbJ\n" +
        "Sb+8j80geuoYEyRRnP6YiL2wmZqMmTHuznFwosO57KoVbz/XEr1bOnBMnPKax5Ll\n" +
        "QlDI3nmnxmUq13ORQ6GkD3M+QRzzxc66BFJbKqUzgv1P3NngyIFr03zb/opXdCTZ\n" +
        "4WfJuCf7Ouz44Ch6ZGQJ+7G5AgMBAAGjKDAmMCQGA1UdHwQdMBswGaAXoBWGE2Zp\n" +
        "bGU6Ly9jcmwgZmlsZS5jcmwwDQYJKoZIhvcNAQEFBQADgYEAB+ublc1l1EnXtEJE\n" +
        "jYeFzAdttHKQ4mn8CXGtHSy9gpckKyLdZUc9/n6yKuNXih29faepZ8mtaftTYpgR\n" +
        "AUqZ+6YYik+rIqZpnWMPR9qZvshf/KPerXiZe7kYBKNvxgmCFfhK8QN6nxUGrR2F\n" +
        "d53HWct6zXqlj+vQZsGC30f764M=\n" +
        "-----END CERTIFICATE-----";

    // a certificate with backslashes in the CRLDistributionPointsExtension uri
    // uri: file://\\\\CRL\\crl_file.crl
    static String certWithBackslashesInCDPStr =
        "-----BEGIN CERTIFICATE-----\n" +
        "MIIB9jCCAV+gAwIBAgIJAOQV9wTIgnc1MA0GCSqGSIb3DQEBBQUAMCUxETAPBgNV\n" +
        "BAMTCHRlc3RuYW1lMRAwDgYDVQQLEwd0ZXN0b3JnMB4XDTEyMDgxMzIzMzcxM1oX\n" +
        "DTEyMDkxMjIzMzcxM1owJTERMA8GA1UEAxMIdGVzdG5hbWUxEDAOBgNVBAsTB3Rl\n" +
        "c3RvcmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALdtczqZqI6RI17mz58/\n" +
        "PgFNBmb/dX/MeVcuaUp79RVUbDQ68z4JxDNv4ImcAxigKXb2jObPAxOdM+VlXROS\n" +
        "AmUNgYrIPuHNnKbd+rwilc6DsGWZnZLmZE63fUvTSqjOnSlsENSgDBVL/4r+yWBB\n" +
        "8KKmFGRFqkCyN1EZl03IW9i7AgMBAAGjLjAsMCoGA1UdHwQjMCEwH6AdoBuGGWZp\n" +
        "bGU6Ly9cXENSTFxjcmxfZmlsZS5jcmwwDQYJKoZIhvcNAQEFBQADgYEACOgZEaST\n" +
        "BCFQVeXZ5d8J3dUZ+wRRkPvrlvopxMtZb3Hyte78PNoIZ78f1gYL18HiGYwKttau\n" +
        "DyPp1lrG9xKPfIeKg+aDWTtVE7pexB4qCryID0+kJfdNzkdIgdGJzJ/RmfJ5heMF\n" +
        "+R46Mhpua4c6gGsE2NGBFxmtS3YHpQsKtz8=\n" +
        "-----END CERTIFICATE-----";

    /*
     * Create an X509Certificate then attempt to construct a
     * CRLDistributionPointsExtension object from its extension value bytes.
     */
    private static void CRLDistributionPointsExtensionTest(String certStr)
            throws Exception {
        CertificateFactory cf = CertificateFactory.getInstance("X.509");
        ByteArrayInputStream is = new ByteArrayInputStream(certStr.getBytes());
        X509Certificate cert = (X509Certificate) cf.generateCertificate(is);

        // oid for CRL Distribution Points = 2.5.29.31
        byte[] CDPExtBytes = cert.getExtensionValue("2.5.29.31");
        DerValue val = new DerValue(CDPExtBytes);
        byte[] data = val.getOctetString();
        CRLDistributionPointsExtension CDPExt
                = new CRLDistributionPointsExtension(false, data);
    }

    public static void main(String[] args) throws Exception {
        /* Try to parse a CRLDistributionPointsExtension URI with a space. */
        try {
            CRLDistributionPointsExtensionTest(certWithSpaceInCDPStr);
            throw new RuntimeException("Illegally parsed a "
                    + "CRLDistributionPointsExtension uri with a space.");
        } catch (IOException e) {
            System.out.println("Caught the correct exception.");

        }

        /* Try to parse a CRLDistributionPointsExtension URI with backslashes. */
        try {
            CRLDistributionPointsExtensionTest(certWithBackslashesInCDPStr);
            throw new RuntimeException("Illegally parsed a "
                    + "CRLDistributionPointsExtension uri with a backslashes.");
        } catch (IOException e) {
            System.out.println("Caught the correct exception.");
        }

        /* Try to construct a URIName from a uri with a space. */
        String uriWithSpace = "file://crl file.crl";
        URIName name;
        try {
            name = new URIName(uriWithSpace);
            throw new RuntimeException("Illegally created a URIName "
                    + "from a uri with a space.");
        } catch (IOException e) {
            System.out.println("Caught the correct exception.");
        }

        /* Try to construct a URIName from a uri with backslashes. */
        String uriWithBackslashes = "file://\\\\CRL\\crl_file.crl";
        try {
            name = new URIName(uriWithBackslashes);
            throw new RuntimeException("Illegally created a URIName "
                    + "from a uri with backslashes.");
        } catch (IOException e) {
            System.out.println("Caught the correct exception.");
        }

        System.out.println("Tests passed.");
    }
}