org.casbah.provider.openssl.OpenSslCAProviderTest.java Source code

Introduction

Here is the source code for org.casbah.provider.openssl.OpenSslCAProviderTest.java

Source

/*******************************************************************************
 * Copyright (C) 2010 Marco Sandrini
 * 
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 * 
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 * 
 * You should have received a copy of the GNU Affero General Public
 * License along with this program.
 * If not, see <http://www.gnu.org/licenses/>.
 ******************************************************************************/
package org.casbah.provider.openssl;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertNotNull;
import static org.junit.Assert.assertTrue;

import java.io.File;
import java.io.IOException;
import java.math.BigInteger;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.X509CRL;
import java.security.cert.X509Certificate;

import javax.security.auth.x500.X500Principal;

import org.apache.commons.io.FileUtils;
import org.casbah.provider.CAProviderException;
import org.casbah.provider.KeyCertificateBundle;
import org.junit.Before;
import org.junit.Test;

public class OpenSslCAProviderTest {

    private static final String PASSWORD = "casbah";
    private static final String CAROOT = File.separatorChar + "caroot";
    private static final String OPENSSL = "openssl";
    private File targetDir;
    private File newCaRoot;

    @Before
    public void setup() throws IOException {
        targetDir = new File(System.getProperty("basedir") + File.separatorChar + "target" + File.separatorChar
                + "test-classes");
        newCaRoot = new File(targetDir, "newcaroot");
        if (newCaRoot.exists()) {
            FileUtils.deleteDirectory(newCaRoot);
        }
    }

    private void rollbackPreviousTests() {
        File oldDb = new File(targetDir, "caroot" + File.separatorChar + "database.txt.old");
        File oldSerial = new File(targetDir, "caroot" + File.separatorChar + "serial.txt.old");

        if (oldDb.exists()) {
            File newDb = new File(targetDir, "caroot" + File.separatorChar + "database.txt");
            newDb.delete();
            oldDb.renameTo(newDb);
        }
        if (oldSerial.exists()) {
            File newSerial = new File(targetDir, "caroot" + File.separatorChar + "serial.txt");
            System.out.println("newSerial is " + newSerial.getAbsolutePath());
            newSerial.delete();
            oldSerial.renameTo(newSerial);
        }
    }

    @Test
    public void testIsCASetup() {
        System.out.println("Target dir is set to: " + targetDir);
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, new File(targetDir, CAROOT), PASSWORD);
        assertTrue("Checking with correct directory", provider.isCASetup());
    }

    @Test
    public void testGetCACertificate() throws CAProviderException {
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, new File(targetDir, CAROOT), PASSWORD);
        Certificate caCert = provider.getCACertificate();
        assertNotNull("Checking ca cert is not null", caCert);
        assertTrue("Checking certificate is an X.509 one", caCert instanceof X509Certificate);
        X509Certificate xcc = (X509Certificate) caCert;
        System.out.println(xcc.getSubjectX500Principal().getName());
        System.out.println(xcc.getIssuerX500Principal().getName());
    }

    @Test
    public void testSign() throws CertificateException, IOException, CAProviderException {

        rollbackPreviousTests();

        String csr = FileUtils.readFileToString(new File(targetDir, "/client/requests/03.csr"));
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, new File(targetDir, CAROOT), PASSWORD);
        X509Certificate cert = provider.sign(csr);
        assertNotNull(cert);
        assertEquals(new BigInteger("03"), cert.getSerialNumber());
        System.out.println(cert.getIssuerX500Principal().getName());
    }

    @Test
    public void testGetProviderVersion_correctProvider() throws CAProviderException {
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, new File(targetDir, CAROOT), PASSWORD);
        String providerVersion = provider.getProviderVersion();
        assertTrue(providerVersion.startsWith("OpenSSL"));
    }

    @Test(expected = CAProviderException.class)
    public void testGetProviderVersion_nonExistingProvider() throws CAProviderException {
        OpenSslCAProvider provider = new OpenSslCAProvider("oppenssl", new File(targetDir, CAROOT), PASSWORD);
        provider.getProviderVersion();
    }

    @Test
    public void testSetupCa() throws CAProviderException {
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, newCaRoot, PASSWORD);
        X500Principal principal = new X500Principal(
                "C=FI, ST=Uusimaa, L=Helsinki, O=Harhaanjohtaja.com, CN=Casbah New CA");
        assertTrue(provider.setUpCA(principal, PASSWORD));
        assertTrue(newCaRoot.exists());
        assertTrue(newCaRoot.isDirectory());
        assertTrue(provider.isCASetup());
    }

    @Test
    public void testGetLatestCrl() throws CAProviderException {
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, new File(targetDir, CAROOT), PASSWORD);
        X509CRL crl = provider.getLatestCrl(true);
        assertNotNull(crl);
    }

    @Test
    public void testGetBundle() throws CAProviderException, IOException, InterruptedException {
        rollbackPreviousTests();
        X500Principal principal = new X500Principal(
                "C=FI, ST=Uusimaa, L=Helsinki, O=Harhaanjohtaja.com, CN=Certificate " + System.currentTimeMillis());
        String keypass = "password";
        OpenSslCAProvider provider = new OpenSslCAProvider(OPENSSL, new File(targetDir, CAROOT), PASSWORD);
        KeyCertificateBundle bundle = provider.getKeyCertificateBundle(principal, keypass);
        assertNotNull(bundle);
        assertNotNull(bundle.getPrivateKey());
        assertNotNull(bundle.getCertificate());

    }

}