undefect. CWE-407 — 63 sites patched across 27 ecosystems
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com Patches, unit tests, benchmarks, whitepaper, and outreach briefs. Public domain — no copyright claimed. Use freely.
This commit is contained in:
commit
0a580b313d
70422 changed files with 17213626 additions and 0 deletions
164
test/jdk/java/security/KeyFactory/Failover.java
Normal file
164
test/jdk/java/security/KeyFactory/Failover.java
Normal file
|
|
@ -0,0 +1,164 @@
|
|||
/*
|
||||
* Copyright (c) 2003, 2025, Oracle and/or its affiliates. All rights reserved.
|
||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||||
*
|
||||
* This code is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License version 2 only, as
|
||||
* published by the Free Software Foundation.
|
||||
*
|
||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* version 2 for more details (a copy is included in the LICENSE file that
|
||||
* accompanied this code).
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License version
|
||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
*
|
||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||||
* or visit www.oracle.com if you need additional information or have any
|
||||
* questions.
|
||||
*/
|
||||
|
||||
/**
|
||||
* @test
|
||||
* @bug 4894125 7054918 8130181
|
||||
* @library /test/lib
|
||||
* @summary test that failover for KeyFactory works
|
||||
* @author Andreas Sterbenz
|
||||
*/
|
||||
|
||||
import java.util.*;
|
||||
|
||||
import java.security.*;
|
||||
import java.security.spec.*;
|
||||
import jdk.test.lib.security.ProvidersSnapshot;
|
||||
import jdk.test.lib.security.SecurityUtils;
|
||||
|
||||
public class Failover {
|
||||
|
||||
public static void main(String[] args) throws Exception {
|
||||
ProvidersSnapshot snapshot = ProvidersSnapshot.create();
|
||||
try {
|
||||
main0(args);
|
||||
} finally {
|
||||
snapshot.restore();
|
||||
}
|
||||
}
|
||||
|
||||
public static void main0(String[] args) throws Exception {
|
||||
Security.insertProviderAt(new ProviderFail(), 1);
|
||||
Security.addProvider(new ProviderPass());
|
||||
System.out.println(Arrays.asList(Security.getProviders()));
|
||||
|
||||
KeyFactory kf;
|
||||
kf = KeyFactory.getInstance("FOO");
|
||||
kf.generatePublic(null);
|
||||
kf.generatePublic(null);
|
||||
kf.generatePrivate(null);
|
||||
|
||||
kf = KeyFactory.getInstance("FOO");
|
||||
kf.generatePrivate(null);
|
||||
kf.getKeySpec(null, null);
|
||||
kf.translateKey(null);
|
||||
|
||||
kf = KeyFactory.getInstance("FOO");
|
||||
kf.getKeySpec(null, null);
|
||||
kf.translateKey(null);
|
||||
|
||||
kf = KeyFactory.getInstance("FOO");
|
||||
kf.translateKey(null);
|
||||
|
||||
// somewhat more real tests using DSA
|
||||
System.out.println("DSA tests...");
|
||||
|
||||
String kpgAlgorithm = "DSA";
|
||||
KeyPairGenerator kpg = KeyPairGenerator.getInstance(kpgAlgorithm);
|
||||
kpg.initialize(SecurityUtils.getTestKeySize(kpgAlgorithm));
|
||||
KeyPair kp = kpg.generateKeyPair();
|
||||
|
||||
kf = KeyFactory.getInstance("DSA");
|
||||
System.out.println(kf.translateKey(kp.getPrivate()));
|
||||
|
||||
kf = KeyFactory.getInstance("DSA");
|
||||
KeySpec spec = kf.getKeySpec(kp.getPublic(), DSAPublicKeySpec.class);
|
||||
|
||||
kf = KeyFactory.getInstance("DSA");
|
||||
System.out.println(kf.generatePublic(spec));
|
||||
|
||||
kf = KeyFactory.getInstance("DSA");
|
||||
try {
|
||||
kf.generatePrivate(spec);
|
||||
throw new Exception("no exception");
|
||||
} catch (InvalidKeySpecException e) {
|
||||
System.out.println(e);
|
||||
}
|
||||
}
|
||||
|
||||
private static class ProviderPass extends Provider {
|
||||
ProviderPass() {
|
||||
super("Pass", "1.0", "Pass");
|
||||
put("KeyFactory.FOO" , "Failover$KeyFactoryPass");
|
||||
}
|
||||
}
|
||||
|
||||
private static class ProviderFail extends Provider {
|
||||
ProviderFail() {
|
||||
super("Fail", "1.0", "Fail");
|
||||
put("KeyFactory.FOO" , "Failover$KeyFactoryFail");
|
||||
put("KeyFactory.DSA" , "Failover$KeyFactoryFail");
|
||||
}
|
||||
}
|
||||
|
||||
public static class KeyFactoryPass extends KeyFactorySpi {
|
||||
|
||||
protected PublicKey engineGeneratePublic(KeySpec keySpec) throws InvalidKeySpecException {
|
||||
System.out.println("MyKeyFactoryPass.engineGeneratePublic()");
|
||||
return null;
|
||||
}
|
||||
|
||||
protected PrivateKey engineGeneratePrivate(KeySpec keySpec) throws InvalidKeySpecException {
|
||||
System.out.println("MyKeyFactoryPass.engineGeneratePrivate()");
|
||||
return null;
|
||||
}
|
||||
|
||||
protected <T extends KeySpec> T
|
||||
engineGetKeySpec(Key key, Class<T> keySpec) throws InvalidKeySpecException
|
||||
{
|
||||
System.out.println("MyKeyFactoryPass.engineGetKeySpec()");
|
||||
return null;
|
||||
}
|
||||
|
||||
protected Key engineTranslateKey(Key key) throws InvalidKeyException {
|
||||
System.out.println("MyKeyFactoryPass.engineTranslateKey()");
|
||||
return null;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
public static class KeyFactoryFail extends KeyFactorySpi {
|
||||
|
||||
protected PublicKey engineGeneratePublic(KeySpec keySpec) throws InvalidKeySpecException {
|
||||
System.out.println("MyKeyFactoryFail.engineGeneratePublic()");
|
||||
throw new InvalidKeySpecException();
|
||||
}
|
||||
|
||||
protected PrivateKey engineGeneratePrivate(KeySpec keySpec) throws InvalidKeySpecException {
|
||||
System.out.println("MyKeyFactoryFail.engineGeneratePrivate()");
|
||||
throw new InvalidKeySpecException();
|
||||
}
|
||||
|
||||
protected <T extends KeySpec> T engineGetKeySpec(Key key, Class<T> keySpec) throws InvalidKeySpecException {
|
||||
System.out.println("MyKeyFactoryFail.engineGetKeySpec()");
|
||||
throw new InvalidKeySpecException();
|
||||
}
|
||||
|
||||
protected Key engineTranslateKey(Key key) throws InvalidKeyException {
|
||||
System.out.println("MyKeyFactoryFail.engineTranslateKey()");
|
||||
throw new InvalidKeyException();
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
189
test/jdk/java/security/KeyFactory/GenerateRSAPrivateCrtKey.java
Normal file
189
test/jdk/java/security/KeyFactory/GenerateRSAPrivateCrtKey.java
Normal file
|
|
@ -0,0 +1,189 @@
|
|||
/*
|
||||
* Copyright (c) 2001, 2024, Oracle and/or its affiliates. All rights reserved.
|
||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||||
*
|
||||
* This code is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License version 2 only, as
|
||||
* published by the Free Software Foundation.
|
||||
*
|
||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* version 2 for more details (a copy is included in the LICENSE file that
|
||||
* accompanied this code).
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License version
|
||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
*
|
||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||||
* or visit www.oracle.com if you need additional information or have any
|
||||
* questions.
|
||||
*/
|
||||
|
||||
/*
|
||||
* @test
|
||||
* @bug 4413634
|
||||
* @summary Make sure that RSA Private CRT Key factory generation using
|
||||
* java.security.spec.RSAPrivateCrtKeySpec passes
|
||||
*/
|
||||
|
||||
import java.math.BigInteger;
|
||||
import java.security.KeyFactory;
|
||||
import java.security.interfaces.RSAPrivateCrtKey;
|
||||
import java.security.spec.PKCS8EncodedKeySpec;
|
||||
import java.security.spec.RSAPrivateCrtKeySpec;
|
||||
import java.util.Arrays;
|
||||
|
||||
public class GenerateRSAPrivateCrtKey {
|
||||
|
||||
public static void main(String[] args) throws Exception {
|
||||
|
||||
// Create an RSA Private Key from the CRT information
|
||||
RSAPrivateCrtKeySpec rsaCrtSpec =
|
||||
new RSAPrivateCrtKeySpec(new BigInteger(1, modulus),
|
||||
new BigInteger(1, pubExpo),
|
||||
new BigInteger(1, priExpo),
|
||||
new BigInteger(1, primeP),
|
||||
new BigInteger(1, primeQ),
|
||||
new BigInteger(1, expoP),
|
||||
new BigInteger(1, expoQ),
|
||||
new BigInteger(1, coeff));
|
||||
|
||||
// Create an RSA private key from the CRT specification
|
||||
KeyFactory kf = KeyFactory.getInstance("RSA",
|
||||
System.getProperty("test.provider.name", "SunRsaSign"));
|
||||
RSAPrivateCrtKey rsaPriKey =
|
||||
(RSAPrivateCrtKey) kf.generatePrivate(rsaCrtSpec);
|
||||
|
||||
// test resulting key against original specification
|
||||
if (!rsaPriKey.getCrtCoefficient().equals(rsaCrtSpec.getCrtCoefficient()))
|
||||
throw new Exception("coefficients not equal");
|
||||
if (!rsaPriKey.getPrimeExponentP().equals(rsaCrtSpec.getPrimeExponentP()))
|
||||
throw new Exception("primeExponentPs not equal");
|
||||
if (!rsaPriKey.getPrimeExponentQ().equals(rsaCrtSpec.getPrimeExponentQ()))
|
||||
throw new Exception("primeExponentQs not equal");
|
||||
if (!rsaPriKey.getPrimeP().equals(rsaCrtSpec.getPrimeP()))
|
||||
throw new Exception("primePs not equal");
|
||||
if (!rsaPriKey.getPrimeQ().equals(rsaCrtSpec.getPrimeQ()))
|
||||
throw new Exception("primeQs not equal");
|
||||
if (!rsaPriKey.getPublicExponent().equals(rsaCrtSpec.getPublicExponent()))
|
||||
throw new Exception("public exponents not equal");
|
||||
if (!rsaPriKey.getPrivateExponent().equals(rsaCrtSpec.getPrivateExponent()))
|
||||
throw new Exception("private exponents not equal");
|
||||
if (!rsaPriKey.getModulus().equals(rsaCrtSpec.getModulus()))
|
||||
throw new Exception("modulus not equal");
|
||||
if (!rsaPriKey.getFormat().equals("PKCS#8") &&
|
||||
!rsaPriKey.getFormat().equals("PKCS8"))
|
||||
throw new Exception("format not PKCS#8");
|
||||
if (!rsaPriKey.getAlgorithm().equals("RSA"))
|
||||
throw new Exception("algorithm not RSA");
|
||||
if (rsaPriKey.getEncoded() == null)
|
||||
throw new Exception("encoded key is null");
|
||||
|
||||
PKCS8EncodedKeySpec pkcs8Key =
|
||||
new PKCS8EncodedKeySpec(rsaPriKey.getEncoded());
|
||||
|
||||
RSAPrivateCrtKey rsaPriKey2
|
||||
= (RSAPrivateCrtKey) kf.generatePrivate(pkcs8Key);
|
||||
if (!Arrays.equals(rsaPriKey.getEncoded(), rsaPriKey2.getEncoded()))
|
||||
throw new Exception("encoded keys not equal");
|
||||
}
|
||||
|
||||
static byte[] modulus = {
|
||||
(byte)0xab, (byte)0x38, (byte)0x39, (byte)0x40,
|
||||
(byte)0x54, (byte)0x2c, (byte)0xac, (byte)0x9a,
|
||||
(byte)0xc0, (byte)0x37, (byte)0x40, (byte)0xd0,
|
||||
(byte)0x49, (byte)0x04, (byte)0xed, (byte)0x51,
|
||||
(byte)0x0e, (byte)0x95, (byte)0x72, (byte)0x02,
|
||||
(byte)0x51, (byte)0xc2, (byte)0xad, (byte)0x9d,
|
||||
(byte)0xa7, (byte)0xeb, (byte)0xba, (byte)0x29,
|
||||
(byte)0xae, (byte)0xd4, (byte)0x49, (byte)0x79,
|
||||
(byte)0x53, (byte)0xfa, (byte)0xdf, (byte)0x01,
|
||||
(byte)0x6c, (byte)0xbc, (byte)0x69, (byte)0x46,
|
||||
(byte)0x4c, (byte)0x83, (byte)0x1b, (byte)0xd9,
|
||||
(byte)0x3b, (byte)0x59, (byte)0x42, (byte)0x04,
|
||||
(byte)0x99, (byte)0x0f, (byte)0x63, (byte)0x24,
|
||||
(byte)0x75, (byte)0xa0, (byte)0xbe, (byte)0x6f,
|
||||
(byte)0x92, (byte)0x4d, (byte)0x9d, (byte)0xa2,
|
||||
(byte)0x40, (byte)0xda, (byte)0xf8, (byte)0x49
|
||||
};
|
||||
|
||||
static byte[] pubExpo = {
|
||||
(byte)0x01, (byte)0x00, (byte)0x01
|
||||
};
|
||||
|
||||
static byte[] priExpo = {
|
||||
(byte)0x4a, (byte)0xd2, (byte)0xe7, (byte)0x32,
|
||||
(byte)0x15, (byte)0x96, (byte)0xf0, (byte)0x57,
|
||||
(byte)0x30, (byte)0x68, (byte)0xf5, (byte)0x0a,
|
||||
(byte)0x10, (byte)0xde, (byte)0xf6, (byte)0x56,
|
||||
(byte)0xd5, (byte)0xe8, (byte)0xb9, (byte)0x4a,
|
||||
(byte)0x0a, (byte)0x30, (byte)0xe9, (byte)0x6e,
|
||||
(byte)0x5c, (byte)0x53, (byte)0xc7, (byte)0xa7,
|
||||
(byte)0x2f, (byte)0x9f, (byte)0xd5, (byte)0xfb,
|
||||
(byte)0x58, (byte)0x9b, (byte)0x1e, (byte)0x5b,
|
||||
(byte)0xe8, (byte)0x6e, (byte)0xae, (byte)0x02,
|
||||
(byte)0xaa, (byte)0x15, (byte)0x23, (byte)0x67,
|
||||
(byte)0xaa, (byte)0x20, (byte)0x9e, (byte)0x82,
|
||||
(byte)0x76, (byte)0x4c, (byte)0xad, (byte)0xe1,
|
||||
(byte)0x95, (byte)0xde, (byte)0xe3, (byte)0x25,
|
||||
(byte)0x66, (byte)0x2f, (byte)0xb0, (byte)0xab,
|
||||
(byte)0x1c, (byte)0xe5, (byte)0xa0, (byte)0x01
|
||||
};
|
||||
|
||||
static byte[] primeP = {
|
||||
(byte)0xd1, (byte)0xeb, (byte)0x51, (byte)0xbd,
|
||||
(byte)0x09, (byte)0x26, (byte)0x7e, (byte)0xe7,
|
||||
(byte)0x12, (byte)0x8c, (byte)0xeb, (byte)0x5c,
|
||||
(byte)0x32, (byte)0x18, (byte)0xd1, (byte)0x60,
|
||||
(byte)0x0b, (byte)0x49, (byte)0x67, (byte)0x8f,
|
||||
(byte)0x78, (byte)0x3c, (byte)0x58, (byte)0xc5,
|
||||
(byte)0xb0, (byte)0x01, (byte)0x70, (byte)0xee,
|
||||
(byte)0x1a, (byte)0xcf, (byte)0x6e, (byte)0xe1
|
||||
};
|
||||
|
||||
static byte[] primeQ = {
|
||||
(byte)0xd0, (byte)0xce, (byte)0x21, (byte)0x83,
|
||||
(byte)0x41, (byte)0x73, (byte)0xf6, (byte)0x84,
|
||||
(byte)0x32, (byte)0x06, (byte)0xa8, (byte)0xa6,
|
||||
(byte)0xad, (byte)0x13, (byte)0x2b, (byte)0x65,
|
||||
(byte)0x27, (byte)0x86, (byte)0x28, (byte)0xef,
|
||||
(byte)0x0e, (byte)0x8c, (byte)0xca, (byte)0x4f,
|
||||
(byte)0x20, (byte)0xc0, (byte)0x19, (byte)0x95,
|
||||
(byte)0xfe, (byte)0x6c, (byte)0x3e, (byte)0x69
|
||||
};
|
||||
|
||||
static byte[] expoP = {
|
||||
(byte)0x1a, (byte)0x49, (byte)0x9c, (byte)0xb7,
|
||||
(byte)0xce, (byte)0x80, (byte)0x8a, (byte)0x9d,
|
||||
(byte)0xc7, (byte)0x3d, (byte)0xec, (byte)0x6f,
|
||||
(byte)0x64, (byte)0x3a, (byte)0xa5, (byte)0x65,
|
||||
(byte)0xa0, (byte)0xa4, (byte)0x35, (byte)0x9a,
|
||||
(byte)0xca, (byte)0xd4, (byte)0xcb, (byte)0xcd,
|
||||
(byte)0x1d, (byte)0xc8, (byte)0x60, (byte)0x6b,
|
||||
(byte)0x00, (byte)0xe2, (byte)0x7f, (byte)0x21
|
||||
};
|
||||
|
||||
static byte[] expoQ = {
|
||||
(byte)0xa7, (byte)0x93, (byte)0xd7, (byte)0x77,
|
||||
(byte)0x94, (byte)0xef, (byte)0x31, (byte)0x78,
|
||||
(byte)0x55, (byte)0x01, (byte)0xdd, (byte)0x16,
|
||||
(byte)0xaf, (byte)0xae, (byte)0xc3, (byte)0xd4,
|
||||
(byte)0x12, (byte)0x0d, (byte)0x6d, (byte)0x0a,
|
||||
(byte)0xb6, (byte)0xdd, (byte)0xad, (byte)0x7c,
|
||||
(byte)0x25, (byte)0xe7, (byte)0xa6, (byte)0x61,
|
||||
(byte)0x27, (byte)0xe8, (byte)0xcd, (byte)0x89
|
||||
};
|
||||
|
||||
static byte[] coeff = {
|
||||
(byte)0x0b, (byte)0xdb, (byte)0x90, (byte)0x7f,
|
||||
(byte)0x33, (byte)0xc5, (byte)0x1f, (byte)0x5b,
|
||||
(byte)0x4d, (byte)0xa4, (byte)0x86, (byte)0xda,
|
||||
(byte)0x77, (byte)0xd4, (byte)0xb3, (byte)0x1d,
|
||||
(byte)0xbc, (byte)0xc3, (byte)0xae, (byte)0x0b,
|
||||
(byte)0xac, (byte)0x91, (byte)0xf3, (byte)0x38,
|
||||
(byte)0x4a, (byte)0xcf, (byte)0x10, (byte)0xb1,
|
||||
(byte)0x5e, (byte)0x5a, (byte)0xd1, (byte)0x86
|
||||
};
|
||||
}
|
||||
|
|
@ -0,0 +1,137 @@
|
|||
/*
|
||||
* Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
|
||||
* Copyright (c) 2024, 2025, Oracle and/or its affiliates. All rights reserved.
|
||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||||
*
|
||||
* This code is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License version 2 only, as
|
||||
* published by the Free Software Foundation.
|
||||
*
|
||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* version 2 for more details (a copy is included in the LICENSE file that
|
||||
* accompanied this code).
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License version
|
||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
*
|
||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||||
* or visit www.oracle.com if you need additional information or have any
|
||||
* questions.
|
||||
*/
|
||||
|
||||
/**
|
||||
* @test
|
||||
* @bug 8254717 8263404
|
||||
* @summary isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards.
|
||||
* @author Greg Rubin, Ziyi Luo
|
||||
*/
|
||||
|
||||
import java.math.BigInteger;
|
||||
import java.security.KeyFactory;
|
||||
import java.security.KeyPair;
|
||||
import java.security.KeyPairGenerator;
|
||||
import java.security.interfaces.RSAPrivateCrtKey;
|
||||
import java.security.interfaces.RSAPrivateKey;
|
||||
import java.security.spec.*;
|
||||
|
||||
public class KeyFactoryGetKeySpecForInvalidSpec {
|
||||
|
||||
// Test for 8263404: This method generates RSAPrivateKey (without Crt info) from a RSAPrivateCrtKey
|
||||
public static RSAPrivateKey privateCrtToPrivate(RSAPrivateCrtKey crtKey) {
|
||||
return new RSAPrivateKey() {
|
||||
@Override
|
||||
public BigInteger getPrivateExponent() {
|
||||
return crtKey.getPrivateExponent();
|
||||
}
|
||||
|
||||
@Override
|
||||
public String getAlgorithm() {
|
||||
return crtKey.getAlgorithm();
|
||||
}
|
||||
|
||||
@Override
|
||||
public String getFormat() {
|
||||
return crtKey.getFormat();
|
||||
}
|
||||
|
||||
@Override
|
||||
public byte[] getEncoded() {
|
||||
return crtKey.getEncoded();
|
||||
}
|
||||
|
||||
@Override
|
||||
public BigInteger getModulus() {
|
||||
return crtKey.getModulus();
|
||||
}
|
||||
};
|
||||
}
|
||||
|
||||
public static void main(String[] args) throws Exception {
|
||||
KeyPairGenerator kg = KeyPairGenerator.getInstance("RSA",
|
||||
System.getProperty("test.provider.name", "SunRsaSign"));
|
||||
kg.initialize(2048);
|
||||
KeyPair pair = kg.generateKeyPair();
|
||||
|
||||
KeyFactory factory = KeyFactory.getInstance("RSA");
|
||||
|
||||
// === Case 1: private key is RSAPrivateCrtKey, keySpec is RSAPrivateKeySpec
|
||||
// === Expected: return RSAPrivateCrtKeySpec
|
||||
// Since RSAPrivateCrtKeySpec inherits from RSAPrivateKeySpec, we'd expect this next line to return an instance of RSAPrivateKeySpec
|
||||
// (because the private key has CRT parts).
|
||||
KeySpec spec = factory.getKeySpec(pair.getPrivate(), RSAPrivateKeySpec.class);
|
||||
if (!(spec instanceof RSAPrivateCrtKeySpec)) {
|
||||
throw new Exception("Spec should be an instance of RSAPrivateCrtKeySpec");
|
||||
}
|
||||
|
||||
// === Case 2: private key is RSAPrivateCrtKey, keySpec is RSAPrivateCrtKeySpec
|
||||
// === Expected: return RSAPrivateCrtKeySpec
|
||||
spec = factory.getKeySpec(pair.getPrivate(), RSAPrivateCrtKeySpec.class);
|
||||
if (!(spec instanceof RSAPrivateCrtKeySpec)) {
|
||||
throw new Exception("Spec should be an instance of RSAPrivateCrtKeySpec");
|
||||
}
|
||||
|
||||
// === Case 3: private key is RSAPrivateKey, keySpec is RSAPrivateKeySpec
|
||||
// === Expected: return RSAPrivateKeySpec not RSAPrivateCrtKeySpec
|
||||
RSAPrivateKey notCrtKey = privateCrtToPrivate((RSAPrivateCrtKey)pair.getPrivate());
|
||||
// InvalidKeySpecException should not be thrown
|
||||
KeySpec notCrtSpec = factory.getKeySpec(notCrtKey, RSAPrivateKeySpec.class);
|
||||
if (notCrtSpec instanceof RSAPrivateCrtKeySpec) {
|
||||
throw new Exception("Spec should be an instance of RSAPrivateKeySpec not RSAPrivateCrtKeySpec");
|
||||
}
|
||||
if (!(notCrtSpec instanceof RSAPrivateKeySpec)) {
|
||||
throw new Exception("Spec should be an instance of RSAPrivateKeySpec");
|
||||
}
|
||||
|
||||
// === Case 4: private key is RSAPrivateKey, keySpec is RSAPrivateCrtKeySpec
|
||||
// === Expected: throw InvalidKeySpecException
|
||||
try {
|
||||
factory.getKeySpec(notCrtKey, RSAPrivateCrtKeySpec.class);
|
||||
throw new Exception("InvalidKeySpecException is expected but not thrown");
|
||||
} catch (InvalidKeySpecException e) {
|
||||
// continue;
|
||||
}
|
||||
|
||||
// This next line should give an InvalidKeySpec exception
|
||||
try {
|
||||
spec = factory.getKeySpec(pair.getPublic(), FakeX509Spec.class);
|
||||
throw new Exception("InvalidKeySpecException is expected but not thrown");
|
||||
} catch (final ClassCastException ex) {
|
||||
throw new Exception("InvalidKeySpecException is expected ClassCastException is thrown", ex);
|
||||
} catch (final InvalidKeySpecException ex) {
|
||||
// Pass
|
||||
}
|
||||
}
|
||||
|
||||
public static class FakeX509Spec extends X509EncodedKeySpec {
|
||||
public FakeX509Spec(byte[] encodedKey) {
|
||||
super(encodedKey);
|
||||
}
|
||||
|
||||
public FakeX509Spec(byte[] encodedKey, String algorithm) {
|
||||
super(encodedKey, algorithm);
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue