russell@unturf.com
0a580b313d
Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com Patches, unit tests, benchmarks, whitepaper, and outreach briefs. Public domain — no copyright claimed. Use freely.
100 lines
3.8 KiB
Java
100 lines
3.8 KiB
Java
/*
|
|
* Copyright (c) 2025, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
import jdk.test.lib.Asserts;
|
|
import jdk.test.lib.security.SeededSecureRandom;
|
|
import jdk.test.lib.security.XMLUtils;
|
|
import org.w3c.dom.Document;
|
|
|
|
import javax.xml.crypto.dsig.XMLSignatureException;
|
|
import java.security.KeyPairGenerator;
|
|
import java.security.NoSuchAlgorithmException;
|
|
import java.security.Security;
|
|
import java.util.Base64;
|
|
|
|
/**
|
|
* @test
|
|
* @bug 8359395
|
|
* @summary ensure properties are used
|
|
* @library /test/lib
|
|
*/
|
|
public class Properties {
|
|
|
|
private static final String DOM_SIGNATURE_PROVIDER
|
|
= "org.jcp.xml.dsig.internal.dom.SignatureProvider";
|
|
private static final String DOM_SIGNATURE_RANDOM
|
|
= "jdk.xmldsig.SecureRandom";
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
// Do not test on RSA. It's always deterministic.
|
|
test("EC");
|
|
test("RSASSA-PSS");
|
|
}
|
|
|
|
static void test(String alg) throws Exception {
|
|
var kp = KeyPairGenerator.getInstance(alg).generateKeyPair();
|
|
var signer = XMLUtils.signer(kp.getPrivate(), kp.getPublic());
|
|
|
|
var n1 = getSignature(signer.sign("hello")); // random one
|
|
var n2 = getSignature(signer.sign("hello")); // another random one
|
|
|
|
signer.prop(DOM_SIGNATURE_RANDOM, new SeededSecureRandom(1L));
|
|
var s1 = getSignature(signer.sign("hello")); // deterministic one
|
|
|
|
signer.prop(DOM_SIGNATURE_RANDOM, new SeededSecureRandom(1L));
|
|
var s1again = getSignature(signer.sign("hello")); // deterministic one repeated
|
|
|
|
signer.prop(DOM_SIGNATURE_RANDOM, new SeededSecureRandom(2L));
|
|
var s2 = getSignature(signer.sign("hello")); // deterministic two
|
|
|
|
Asserts.assertEqualsByteArray(s1, s1again);
|
|
assertsAllDifferent(n1, n2, s1, s2);
|
|
|
|
signer.prop(DOM_SIGNATURE_PROVIDER, Security.getProvider("SunJCE"));
|
|
// Asserts throwing XMLSignatureException with cause NoSuchAlgorithmException
|
|
Asserts.assertEquals(
|
|
Asserts.assertThrows(XMLSignatureException.class,
|
|
() -> signer.sign("hello")).getCause().getClass(),
|
|
NoSuchAlgorithmException.class);
|
|
}
|
|
|
|
private static void assertsAllDifferent(byte[]... inputs) {
|
|
for (var a : inputs) {
|
|
for (var b : inputs) {
|
|
if (a != b) {
|
|
Asserts.assertNotEqualsByteArray(a, b);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
static byte[] getSignature(Document doc) {
|
|
for (var n = doc.getDocumentElement().getFirstChild();
|
|
n != null; n = n.getNextSibling()) {
|
|
if ("SignatureValue".equals(n.getLocalName())) {
|
|
return Base64.getMimeDecoder().decode(n.getTextContent());
|
|
}
|
|
}
|
|
throw new IllegalArgumentException("Not found");
|
|
}
|
|
}
|