keytest.java

来自「一个java开发的非常全面的关于证书发放」· Java 代码 · 共 142 行

/*
  Name:         KeyTest.java
  Licensing:    LGPL

  API:          Sun (http://java.sun.com) JCE 1.2.2 API (cleanroom implementation by Bouncy Castle)
  Provider:     Bouncy Castle (http://www.bouncycastle.org)

  Disclaimer:

  COVERED CODE IS PROVIDED UNDER THIS LICENSE ON AN "AS IS" BASIS, WITHOUT WARRANTY OF ANY KIND,
  EITHER EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT THE COVERED CODE
  IS FREE OF DEFECTS, MERCHANTABLE, FIT FOR A PARTICULAR PURPOSE OR NON-INFRINGING. THE ENTIRE
  RISK AS TO THE QUALITY AND PERFORMANCE OF THE COVERED CODE IS WITH YOU. SHOULD ANY COVERED CODE
  PROVE DEFECTIVE IN ANY RESPECT, YOU (NOT THE INITIAL DEVELOPER OR ANY OTHER CONTRIBUTOR)
  ASSUME THE COST OF ANY NECESSARY SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER OF WARRANTY
  CONSTITUTES AN ESSENTIAL PART OF THIS LICENSE. NO USE OF ANY COVERED CODE IS AUTHORIZED
  HEREUNDER EXCEPT UNDER THIS DISCLAIMER.

  (C) Copyright 2003 Gert Van Ham
*/

package net.sourceforge.jcetaglib.test;

import junit.framework.Assert;
import junit.framework.TestCase;
import net.sourceforge.jcetaglib.lib.Keystore;
import net.sourceforge.jcetaglib.lib.X509Cert;

import java.security.KeyPair;
import java.security.cert.X509Certificate;

/**
 * A collection of symmetric & asymmetric key tests
 * <P>
 * These tests can be run using JUnit (http://www.junit.org)
 *
 * @author Gert Van Ham
 * @author [e-mail]
 * @author http://jcetaglib.sourceforge.net
 * @version $Id: KeyTest.java,v 1.3 2004/04/15 07:28:36 hamgert Exp $
 */
public class KeyTest extends TestCase {

    /**
     * test generating symmetric (block cipher) keystores
     *
     * @throws Exception
     */
    public void testGenerateKeys() throws Exception {
        for (int i = 0; i < RunTest.alg.length; i++) {
            String fileloc = RunTest.TEMPFOLDER + RunTest.alg[i][0] + "_" + RunTest.alg[i][1] + ".key";
            Keystore.generateKey(RunTest.alg[i][0]
                    , Integer.parseInt(RunTest.alg[i][1])
                    , null
                    , fileloc
                    , new StringBuffer("password"));
        }
    }

    /**
     * testing X.509 certificate generation
     *
     * @throws Exception
     */
    public void testGenerateCertificates() throws Exception {

        // generate key pair for CA
        KeyPair kp = X509Cert.generateKeyPair("RSA", 1024, null);

        // generate self-signed CA certificate
        X509Certificate cacert = X509Cert.selfsign(kp.getPrivate()
                , kp.getPublic()
                , "MD5WithRSAEncryption"
                , 365
                , "C=BE, O=NET, OU=Sourceforge, CN=CertAuthority, EmailAddress=[e-mail]"
                , true
                , null);

        // save as P12 keystore
        X509Cert.saveAsP12(cacert, cacert, kp.getPrivate(), RunTest.TEMPFOLDER + "ca.p12", "ca", new StringBuffer("password"));

        // generate key pair for Alice
        KeyPair kpAlice = X509Cert.generateKeyPair("RSA", 1024, null);

        // generate certificate for Alice signed by CA
        X509Certificate alicecert = X509Cert.sign(kpAlice.getPublic()
                , kp.getPrivate()
                , cacert
                , "MD5WithRSAEncryption"
                , 365
                , "C=BE, O=NET, OU=Sourceforge, CN=Alice, EmailAddress=[e-mail]"
                , true
                , null
                , "client");

        // save as P12 keystore
        X509Cert.saveAsP12(alicecert, cacert, kpAlice.getPrivate(), RunTest.TEMPFOLDER + "alice.p12", "alice", new StringBuffer("password"));

        // generate key pair for Bob
        KeyPair kpBob = X509Cert.generateKeyPair("RSA", 1024, null);

        // generate certificate for Alice signed by CA
        X509Certificate bobcert = X509Cert.sign(kpBob.getPublic()
                , kp.getPrivate()
                , cacert
                , "MD5WithRSAEncryption"
                , 365
                , "C=BE, O=NET, OU=Sourceforge, CN=Bob, EmailAddress=[e-mail]"
                , true
                , null
                , "all");

        // save as P12 keystore
        X509Cert.saveAsP12(bobcert, cacert, kpBob.getPrivate(), RunTest.TEMPFOLDER + "bob.p12", "bob", new StringBuffer("password"));
    }

    /**
     * reading test of X.509 certificates
     *
     * @throws Exception
     */
    public void testReadCertificates() throws Exception {
        // load Alice's certificate
        X509Certificate alicecert = X509Cert.getCertificateFromP12(RunTest.TEMPFOLDER + "alice.p12", "alice", new StringBuffer("password"));

        alicecert.checkValidity();

        Assert.assertEquals(alicecert.getSubjectDN().toString(), "C=BE,O=NET,OU=Sourceforge,CN=Alice,E=[e-mail]");
        Assert.assertEquals(alicecert.getSigAlgName(), "MD5WithRSAEncryption");
        Assert.assertEquals(alicecert.getIssuerDN().toString(), "C=BE,O=NET,OU=Sourceforge,CN=CertAuthority,E=[e-mail]");

        // load Bob's certificate
        X509Certificate bobcert = X509Cert.getCertificateFromP12(RunTest.TEMPFOLDER + "bob.p12", "bob", new StringBuffer("password"));

        bobcert.checkValidity();

        Assert.assertEquals(bobcert.getSubjectDN().toString(), "C=BE,O=NET,OU=Sourceforge,CN=Bob,E=[e-mail]");
        Assert.assertEquals(bobcert.getSigAlgName(), "MD5WithRSAEncryption");
        Assert.assertEquals(bobcert.getIssuerDN().toString(), "C=BE,O=NET,OU=Sourceforge,CN=CertAuthority,E=[e-mail]");
    }
}