//Verify that instances of HttpsEndpoint and SslEndpoint
//with no socket factories are trusted.
int port = Integer.parseInt(getStringValue("listenPort"));
HttpsEndpoint httpsEndpoint = HttpsEndpoint.getInstance(
InetAddress.getLocalHost().getHostAddress(), port);
TestTrustVerifierCtxSSL ctx = new TestTrustVerifierCtxSSL();
if (!verifier.isTrustedObject(httpsEndpoint,ctx)){
throw new TestException("HttpsEndpoint instance"
+ " with no socket factory is considered untrusted");
}
SslEndpoint sslEndpoint = SslEndpoint.getInstance(
InetAddress.getLocalHost().getHostAddress(), port);
if (!verifier.isTrustedObject(sslEndpoint,ctx)){
throw new TestException("SslEndpoint instance"
+ " with no socket factory is considered untrusted");
}
//Verify that instances of HttpsEndpoint and SslEndpoint
//with trusted socket factories are trusted.
httpsEndpoint = HttpsEndpoint.getInstance(
InetAddress.getLocalHost().getHostAddress(), port,
new TestSocketFactory(true));
sslEndpoint = SslEndpoint.getInstance(
InetAddress.getLocalHost().getHostAddress(), port,
new TestSocketFactory(true));
if (!verifier.isTrustedObject(httpsEndpoint,ctx)){
throw new TestException("HttpsEndpoint instance"
+ " with trusted socket factory is considered untrusted");
}
if (!verifier.isTrustedObject(sslEndpoint,ctx)){
throw new TestException("SslEndpoint instance"
+ " with trusted factory is considered untrusted");
}
//Verify that instances of HttpsEndpoint and SslEndpoint with
//untrusted socket factories are not trusted.
httpsEndpoint = HttpsEndpoint.getInstance(
InetAddress.getLocalHost().getHostAddress(), port,
new TestSocketFactory(false));
sslEndpoint = SslEndpoint.getInstance(
InetAddress.getLocalHost().getHostAddress(), port,
new TestSocketFactory(false));
if (verifier.isTrustedObject(httpsEndpoint,ctx)){
throw new TestException("HttpsEndpoint instance"
+ " with untrusted socket factory is considered trusted");
}
if (verifier.isTrustedObject(sslEndpoint,ctx)){
throw new TestException("SslEndpoint instance"
+ " with untrusted factory is considered trusted");
}
//Verify that instances of ConfidentialityStrength are trusted.
if (!verifier.isTrustedObject(ConfidentialityStrength.STRONG,ctx)){
throw new TestException(
"ConfidentialityStrength.STRONG is considered untrusted");
}
if (!verifier.isTrustedObject(ConfidentialityStrength.WEAK,ctx)){
throw new TestException(
"ConfidentialityStrength.WEAK is considered untrusted");
}
//Verify that instances of other constraints are not trusted.
if (verifier.isTrustedObject(Confidentiality.YES,ctx)){
throw new TestException(
"Constraint other than ConfidentialityStrength"
+ " considered trusted");
}
//Verify that instances of X500Principal are trusted.
X500Principal x5Principal = new X500Principal("CN=\"bogus\"");
if (!verifier.isTrustedObject(x5Principal,ctx)){
throw new TestException(
"X500Principal is considered untrusted");
}
KerberosPrincipal kPrincipal = new KerberosPrincipal("bogus@bogus");
if (verifier.isTrustedObject(kPrincipal,ctx)){
throw new TestException(
"Principal other than X500Principal is considered trusted");
}
//Verify that Remote and Security exceptions from the
//TrustVerifier.Context are propagated.
boolean exceptionThrown = false;
ctx = new TestTrustVerifierCtxSSL(new RemoteException());
try {
verifier.isTrustedObject(httpsEndpoint,ctx);
} catch (RemoteException e) {
exceptionThrown = true;
}
if (!exceptionThrown) {
throw new TestException("RemoteException in the"
+ " context was not propagated");
}
exceptionThrown = false;
ctx = new TestTrustVerifierCtxSSL(new SecurityException());
try {
verifier.isTrustedObject(httpsEndpoint,ctx);
} catch (SecurityException e) {
exceptionThrown = true;
}
if (!exceptionThrown) {
throw new TestException("SecurityException in the"
+ " context was not propagated");
}
//Verify that NullPointerException is thrown if either argument of
//isTrustedObject is null.
exceptionThrown = false;
ctx = new TestTrustVerifierCtxSSL();
try {
verifier.isTrustedObject(null, ctx);
} catch (NullPointerException e) {
exceptionThrown = true;
}