engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

undefect. CWE-407 — 63 sites patched across 27 ecosystems

Browse source 
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.
This commit is contained in:
russell@unturf.com 2026-03-26 17:11:57 -04:00
commit 0a580b313d
70422 changed files with 17213626 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

158
test/jdk/sun/security/tools/keytool/StartDateTest.java Normal file
View file

@ -0,0 +1,158 @@
/*
* Copyright (c) 2007, 2013, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* @test
* @bug 6468285
* @summary keytool ability to backdate self-signed certificates to compensate for clock skew
* @modules java.base/sun.security.tools.keytool:+open
* @run main StartDateTest
*/
import java.io.File;
import java.io.FileInputStream;
import java.lang.reflect.Method;
import java.security.KeyStore;
import java.security.cert.X509Certificate;
import java.util.Calendar;
import java.util.Date;
import java.util.GregorianCalendar;
public class StartDateTest {
public static void main(String[] args) throws Exception {
// Part 1: Test function
Calendar cal = new GregorianCalendar();
int year = cal.get(Calendar.YEAR);
int month = cal.get(Calendar.MONTH);
new File("jks").delete();
run("one", "+1y");
cal.setTime(getIssueDate("one"));
System.out.println(cal);
if (cal.get(Calendar.YEAR) != year + 1) {
throw new Exception("Function check #1 fails");
}
run("two", "+1m");
cal.setTime(getIssueDate("two"));
System.out.println(cal);
if (cal.get(Calendar.MONTH) != (month + 1) % 12) {
throw new Exception("Function check #2 fails");
}
run("three", "2009/10/11 12:34:56");
cal.setTime(getIssueDate("three"));
System.out.println(cal);
if (cal.get(Calendar.YEAR) != 2009 ||
cal.get(Calendar.MONTH) != Calendar.OCTOBER ||
cal.get(Calendar.DAY_OF_MONTH) != 11 ||
cal.get(Calendar.HOUR_OF_DAY) != 12 ||
cal.get(Calendar.MINUTE) != 34 ||
cal.get(Calendar.SECOND) != 56) {
throw new Exception("Function check #3 fails");
}
// Part 2: Test format
Method m = sun.security.tools.keytool.Main.class.getDeclaredMethod(
"getStartDate", String.class);
m.setAccessible(true);
for (String s: new String[] {
null, //NOW!
"+1m+1d",
"+1y-1m+1d",
"+3H",
"+1M",
"-5M",
"+011d",
"+22S",
"+500S",
"2001/01/01",
"15:15:15",
"2001/01/01 11:11:11",
}) {
try {
System.out.println(s + " " + m.invoke(null, s));
} catch (Exception e) {
e.printStackTrace();
throw new Exception("Failed at " + s);
}
}
for (String s: new String[] {
"", // empty
"+3",
"+3m+",
"+3m+3",
"1m", // no sign
"+0x011d", // hex number
"+1m1d", // no sign for the 2nd sub value
"m",
"+1h", // h is not H
"-1m1d",
"-m",
"x",
"+1m +1d",
"2007/07",
"01:01",
"+01:01:01", // what's this?
"1:01:01",
"12pm",
"2007/07/07 12:12:12", // extra blank between
"2001/01/01-11:11:11",
"2007-07-07", // non-standard date delim
"2007/7/7", // no padding
"07/07/07", // year's length not 4
"1:1:1",
}) {
boolean failed = false;
try {
System.out.println(m.invoke(null, s));
} catch (Exception e) {
System.out.println(s + " " + e.getCause());
failed = true;
}
if (!failed) throw new Exception("Failed at " + s);
}
}
// The keytool command line template, alias and startdate TBD
static String[] cmd = ("-alias tbd -startdate tbd -keystore jks " +
"-storetype jks -storepass changeit -keypass changeit " +
"-keyalg rsa -genkeypair -dname CN=Haha -debug").split(" ");
static void run(String alias, String startDate) throws Exception {
cmd[1] = alias;
cmd[3] = startDate;
sun.security.tools.keytool.Main.main(cmd);
}
static Date getIssueDate(String alias) throws Exception {
KeyStore ks = KeyStore.getInstance("jks");
try (FileInputStream fis = new FileInputStream("jks")) {
ks.load(fis, "changeit".toCharArray());
}
X509Certificate cert = (X509Certificate)ks.getCertificate(alias);
return cert.getNotBefore();
}
}