Quelle JKStoPKCS12.java Sprache: JAVA

/*
* Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/

/*
* @test
* @bug 8010125 8192988
* @summary keytool should support -storepasswd for pkcs12 keystores
* @library /test/lib
* @build jdk.test.lib.SecurityTools
*        jdk.test.lib.Utils
*        jdk.test.lib.Asserts
*        jdk.test.lib.JDKToolFinder
*        jdk.test.lib.JDKToolLauncher
*        jdk.test.lib.Platform
*        jdk.test.lib.process.*
* @run main JKStoPKCS12
*/

import jdk.test.lib.Asserts;
import jdk.test.lib.SecurityTools;
import jdk.test.lib.process.OutputAnalyzer;

import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.security.KeyStore;
import java.util.Collections;

public class JKStoPKCS12 {

    static String srcStorePass, srcKeyPass;

    public static void main(String[] args) throws Exception {

        // Part 1: JKS keystore with same storepass and keypass
        genJKS("pass1111", "pass1111");

        // Change storepass, keypass also changes
        convert("pass2222", null);
        // You can keep storepass unchanged
        convert("pass1111", null);
        // Or change storepass and keypass both, explicitly
        convert("pass2222", "pass2222");

        // Part 2: JKS keystore with different storepass and keypass
        Files.delete(Paths.get("jks"));
        genJKS("pass1111", "pass2222");

        // Can use old keypass as new storepass so new storepass and keypass are same
        convert("pass2222", null);
        // Or specify both storepass and keypass to brand new ones
        convert("pass3333", "pass3333");
        // Or change storepass, keypass also changes. Remember to provide srckeypass
        convert("pass1111", null);
    }

    // Generate JKS keystore with srcStorePass and srcKeyPass
    static void genJKS(String storePass, String keyPass)
            throws Exception {
        srcStorePass = storePass;
        srcKeyPass = keyPass;
        kt("-genkeypair -keystore jks -storetype jks "
                    + "-alias me -dname CN=Me -keyalg rsa "
                    + "-storepass " + srcStorePass + " -keypass " + srcKeyPass)
                .shouldHaveExitValue(0);
    }

    // Convert JKS to PKCS12 with destStorePass and destKeyPass (optional)
    static void convert(String destStorePass, String destKeyPass)
            throws Exception {

        String cmd = "-importkeystore -noprompt"
                + " -srcstoretype jks -srckeystore jks"
                + " -destkeystore p12 -deststoretype pkcs12"
                + " -srcstorepass " + srcStorePass
                + " -deststorepass " + destStorePass;

        // Must import by alias (-srckeypass not available when importing all)
        if (!srcStorePass.equals(srcKeyPass)) {
            cmd += " -srcalias me";
            cmd += " -srckeypass " + srcKeyPass;
        }
        if (destKeyPass != null) {
            cmd += " -destkeypass " + destKeyPass;
        }

        kt(cmd).shouldHaveExitValue(0);

        // Confirms the storepass and keypass are all correct
        KeyStore.getInstance(new File("p12"), destStorePass.toCharArray())
                .getKey("me", destStorePass.toCharArray());

        Files.delete(Paths.get("p12"));
    }

    static OutputAnalyzer kt(String arg) throws Exception {
        return SecurityTools.keytool(arg);
    }
}

quality87%

¤ Dauer der Verarbeitung: 0.14 Sekunden (vorverarbeitet) ¤

Wurzel

Suchen

Beweissystem der NASA

Beweissystem Isabelle

NIST Cobol Testsuite

Cephes Mathematical Library

Wiener Entwicklungsmethode

Haftungshinweis

Die Informationen auf dieser Webseite wurden nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit, noch Qualität der bereit gestellten Informationen zugesichert.

Bemerkung:

Die farbliche Syntaxdarstellung ist noch experimentell.