| /* |
| * Copyright (C) 2009 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package android.webkit.cts; |
| |
| import static org.junit.Assert.assertEquals; |
| import static org.junit.Assert.assertFalse; |
| import static org.junit.Assert.assertNotEquals; |
| import static org.junit.Assert.assertNotNull; |
| import static org.junit.Assert.assertNull; |
| import static org.junit.Assert.assertTrue; |
| |
| import android.annotation.CallSuper; |
| import android.net.http.SslCertificate; |
| import android.net.http.SslError; |
| import android.os.StrictMode; |
| import android.os.StrictMode.ThreadPolicy; |
| import android.platform.test.annotations.AppModeFull; |
| import android.util.Log; |
| import android.webkit.ClientCertRequest; |
| import android.webkit.SslErrorHandler; |
| import android.webkit.WebView; |
| import android.webkit.WebViewClient; |
| import android.webkit.cts.WebViewSyncLoader.WaitForLoadedClient; |
| |
| import androidx.test.ext.junit.rules.ActivityScenarioRule; |
| import androidx.test.ext.junit.runners.AndroidJUnit4; |
| import androidx.test.filters.MediumTest; |
| |
| import com.android.compatibility.common.util.NullWebViewUtils; |
| import com.android.compatibility.common.util.PollingCheck; |
| |
| import org.junit.After; |
| import org.junit.Assume; |
| import org.junit.Before; |
| import org.junit.Rule; |
| import org.junit.Test; |
| import org.junit.runner.RunWith; |
| |
| import java.io.ByteArrayInputStream; |
| import java.io.File; |
| import java.security.KeyFactory; |
| import java.security.KeyStore; |
| import java.security.Principal; |
| import java.security.PrivateKey; |
| import java.security.cert.CertificateFactory; |
| import java.security.cert.X509Certificate; |
| import java.security.spec.PKCS8EncodedKeySpec; |
| import java.util.concurrent.atomic.AtomicBoolean; |
| |
| @AppModeFull(reason = "Instant apps cannot bind sockets") |
| @MediumTest |
| @RunWith(AndroidJUnit4.class) |
| public class WebViewSslTest extends SharedWebViewTest { |
| private static final String LOGTAG = "WebViewSslTest"; |
| |
| /** |
| * Taken verbatim from AndroidKeyStoreTest.java. Copying the build notes here for reference. |
| * The keys and certificates below are generated with: |
| * |
| * openssl req -new -x509 -days 3650 -extensions v3_ca -keyout cakey.pem -out cacert.pem |
| * openssl req -newkey rsa:1024 -keyout userkey.pem -nodes -days 3650 -out userkey.req |
| * mkdir -p demoCA/newcerts |
| * touch demoCA/index.txt |
| * echo "01" > demoCA/serial |
| * openssl ca -out usercert.pem -in userkey.req -cert cacert.pem -keyfile cakey.pem -days 3650 |
| */ |
| |
| /** |
| * Generated from above and converted with: |
| * |
| * openssl x509 -outform d -in usercert.pem | xxd -i | sed 's/0x/(byte) 0x/g' |
| */ |
| private static final byte[] FAKE_RSA_USER_1 = new byte[] { |
| (byte) 0x30, (byte) 0x82, (byte) 0x02, (byte) 0x95, (byte) 0x30, (byte) 0x82, |
| (byte) 0x01, (byte) 0xfe, (byte) 0xa0, (byte) 0x03, (byte) 0x02, (byte) 0x01, |
| (byte) 0x02, (byte) 0x02, (byte) 0x01, (byte) 0x01, (byte) 0x30, (byte) 0x0d, |
| (byte) 0x06, (byte) 0x09, (byte) 0x2a, (byte) 0x86, (byte) 0x48, (byte) 0x86, |
| (byte) 0xf7, (byte) 0x0d, (byte) 0x01, (byte) 0x01, (byte) 0x05, (byte) 0x05, |
| (byte) 0x00, (byte) 0x30, (byte) 0x4f, (byte) 0x31, (byte) 0x0b, (byte) 0x30, |
| (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x06, |
| (byte) 0x13, (byte) 0x02, (byte) 0x55, (byte) 0x53, (byte) 0x31, (byte) 0x0b, |
| (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, |
| (byte) 0x08, (byte) 0x13, (byte) 0x02, (byte) 0x43, (byte) 0x41, (byte) 0x31, |
| (byte) 0x16, (byte) 0x30, (byte) 0x14, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x04, (byte) 0x07, (byte) 0x13, (byte) 0x0d, (byte) 0x4d, (byte) 0x6f, |
| (byte) 0x75, (byte) 0x6e, (byte) 0x74, (byte) 0x61, (byte) 0x69, (byte) 0x6e, |
| (byte) 0x20, (byte) 0x56, (byte) 0x69, (byte) 0x65, (byte) 0x77, (byte) 0x31, |
| (byte) 0x1b, (byte) 0x30, (byte) 0x19, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x04, (byte) 0x0a, (byte) 0x13, (byte) 0x12, (byte) 0x41, (byte) 0x6e, |
| (byte) 0x64, (byte) 0x72, (byte) 0x6f, (byte) 0x69, (byte) 0x64, (byte) 0x20, |
| (byte) 0x54, (byte) 0x65, (byte) 0x73, (byte) 0x74, (byte) 0x20, (byte) 0x43, |
| (byte) 0x61, (byte) 0x73, (byte) 0x65, (byte) 0x73, (byte) 0x30, (byte) 0x1e, |
| (byte) 0x17, (byte) 0x0d, (byte) 0x31, (byte) 0x32, (byte) 0x30, (byte) 0x38, |
| (byte) 0x31, (byte) 0x34, (byte) 0x32, (byte) 0x33, (byte) 0x32, (byte) 0x35, |
| (byte) 0x34, (byte) 0x38, (byte) 0x5a, (byte) 0x17, (byte) 0x0d, (byte) 0x32, |
| (byte) 0x32, (byte) 0x30, (byte) 0x38, (byte) 0x31, (byte) 0x32, (byte) 0x32, |
| (byte) 0x33, (byte) 0x32, (byte) 0x35, (byte) 0x34, (byte) 0x38, (byte) 0x5a, |
| (byte) 0x30, (byte) 0x55, (byte) 0x31, (byte) 0x0b, (byte) 0x30, (byte) 0x09, |
| (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x06, (byte) 0x13, |
| (byte) 0x02, (byte) 0x55, (byte) 0x53, (byte) 0x31, (byte) 0x0b, (byte) 0x30, |
| (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x08, |
| (byte) 0x13, (byte) 0x02, (byte) 0x43, (byte) 0x41, (byte) 0x31, (byte) 0x1b, |
| (byte) 0x30, (byte) 0x19, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, |
| (byte) 0x0a, (byte) 0x13, (byte) 0x12, (byte) 0x41, (byte) 0x6e, (byte) 0x64, |
| (byte) 0x72, (byte) 0x6f, (byte) 0x69, (byte) 0x64, (byte) 0x20, (byte) 0x54, |
| (byte) 0x65, (byte) 0x73, (byte) 0x74, (byte) 0x20, (byte) 0x43, (byte) 0x61, |
| (byte) 0x73, (byte) 0x65, (byte) 0x73, (byte) 0x31, (byte) 0x1c, (byte) 0x30, |
| (byte) 0x1a, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x03, |
| (byte) 0x13, (byte) 0x13, (byte) 0x73, (byte) 0x65, (byte) 0x72, (byte) 0x76, |
| (byte) 0x65, (byte) 0x72, (byte) 0x31, (byte) 0x2e, (byte) 0x65, (byte) 0x78, |
| (byte) 0x61, (byte) 0x6d, (byte) 0x70, (byte) 0x6c, (byte) 0x65, (byte) 0x2e, |
| (byte) 0x63, (byte) 0x6f, (byte) 0x6d, (byte) 0x30, (byte) 0x81, (byte) 0x9f, |
| (byte) 0x30, (byte) 0x0d, (byte) 0x06, (byte) 0x09, (byte) 0x2a, (byte) 0x86, |
| (byte) 0x48, (byte) 0x86, (byte) 0xf7, (byte) 0x0d, (byte) 0x01, (byte) 0x01, |
| (byte) 0x01, (byte) 0x05, (byte) 0x00, (byte) 0x03, (byte) 0x81, (byte) 0x8d, |
| (byte) 0x00, (byte) 0x30, (byte) 0x81, (byte) 0x89, (byte) 0x02, (byte) 0x81, |
| (byte) 0x81, (byte) 0x00, (byte) 0xce, (byte) 0x29, (byte) 0xeb, (byte) 0xf6, |
| (byte) 0x5b, (byte) 0x25, (byte) 0xdc, (byte) 0xa1, (byte) 0xa6, (byte) 0x2c, |
| (byte) 0x66, (byte) 0xcb, (byte) 0x20, (byte) 0x90, (byte) 0x27, (byte) 0x86, |
| (byte) 0x8a, (byte) 0x44, (byte) 0x71, (byte) 0x50, (byte) 0xda, (byte) 0xd3, |
| (byte) 0x02, (byte) 0x77, (byte) 0x55, (byte) 0xe9, (byte) 0xe8, (byte) 0x08, |
| (byte) 0xf3, (byte) 0x36, (byte) 0x9a, (byte) 0xae, (byte) 0xab, (byte) 0x04, |
| (byte) 0x6d, (byte) 0x00, (byte) 0x99, (byte) 0xbf, (byte) 0x7d, (byte) 0x0f, |
| (byte) 0x67, (byte) 0x8b, (byte) 0x1d, (byte) 0xd4, (byte) 0x2b, (byte) 0x7c, |
| (byte) 0xcb, (byte) 0xcd, (byte) 0x33, (byte) 0xc7, (byte) 0x84, (byte) 0x30, |
| (byte) 0xe2, (byte) 0x45, (byte) 0x21, (byte) 0xb3, (byte) 0x75, (byte) 0xf5, |
| (byte) 0x79, (byte) 0x02, (byte) 0xda, (byte) 0x50, (byte) 0xa3, (byte) 0x8b, |
| (byte) 0xce, (byte) 0xc3, (byte) 0x8e, (byte) 0x0f, (byte) 0x25, (byte) 0xeb, |
| (byte) 0x08, (byte) 0x2c, (byte) 0xdd, (byte) 0x1c, (byte) 0xcf, (byte) 0xff, |
| (byte) 0x3b, (byte) 0xde, (byte) 0xb6, (byte) 0xaa, (byte) 0x2a, (byte) 0xa9, |
| (byte) 0xc4, (byte) 0x8a, (byte) 0x24, (byte) 0x24, (byte) 0xe6, (byte) 0x29, |
| (byte) 0x0d, (byte) 0x98, (byte) 0x4c, (byte) 0x32, (byte) 0xa1, (byte) 0x7b, |
| (byte) 0x23, (byte) 0x2b, (byte) 0x42, (byte) 0x30, (byte) 0xee, (byte) 0x78, |
| (byte) 0x08, (byte) 0x47, (byte) 0xad, (byte) 0xf2, (byte) 0x96, (byte) 0xd5, |
| (byte) 0xf1, (byte) 0x62, (byte) 0x42, (byte) 0x2d, (byte) 0x35, (byte) 0x19, |
| (byte) 0xb4, (byte) 0x3c, (byte) 0xc9, (byte) 0xc3, (byte) 0x5f, (byte) 0x03, |
| (byte) 0x16, (byte) 0x3a, (byte) 0x23, (byte) 0xac, (byte) 0xcb, (byte) 0xce, |
| (byte) 0x9e, (byte) 0x51, (byte) 0x2e, (byte) 0x6d, (byte) 0x02, (byte) 0x03, |
| (byte) 0x01, (byte) 0x00, (byte) 0x01, (byte) 0xa3, (byte) 0x7b, (byte) 0x30, |
| (byte) 0x79, (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x1d, (byte) 0x13, (byte) 0x04, (byte) 0x02, (byte) 0x30, (byte) 0x00, |
| (byte) 0x30, (byte) 0x2c, (byte) 0x06, (byte) 0x09, (byte) 0x60, (byte) 0x86, |
| (byte) 0x48, (byte) 0x01, (byte) 0x86, (byte) 0xf8, (byte) 0x42, (byte) 0x01, |
| (byte) 0x0d, (byte) 0x04, (byte) 0x1f, (byte) 0x16, (byte) 0x1d, (byte) 0x4f, |
| (byte) 0x70, (byte) 0x65, (byte) 0x6e, (byte) 0x53, (byte) 0x53, (byte) 0x4c, |
| (byte) 0x20, (byte) 0x47, (byte) 0x65, (byte) 0x6e, (byte) 0x65, (byte) 0x72, |
| (byte) 0x61, (byte) 0x74, (byte) 0x65, (byte) 0x64, (byte) 0x20, (byte) 0x43, |
| (byte) 0x65, (byte) 0x72, (byte) 0x74, (byte) 0x69, (byte) 0x66, (byte) 0x69, |
| (byte) 0x63, (byte) 0x61, (byte) 0x74, (byte) 0x65, (byte) 0x30, (byte) 0x1d, |
| (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x1d, (byte) 0x0e, (byte) 0x04, |
| (byte) 0x16, (byte) 0x04, (byte) 0x14, (byte) 0x32, (byte) 0xa1, (byte) 0x1e, |
| (byte) 0x6b, (byte) 0x69, (byte) 0x04, (byte) 0xfe, (byte) 0xb3, (byte) 0xcd, |
| (byte) 0xf8, (byte) 0xbb, (byte) 0x14, (byte) 0xcd, (byte) 0xff, (byte) 0xd4, |
| (byte) 0x16, (byte) 0xc3, (byte) 0xab, (byte) 0x44, (byte) 0x2f, (byte) 0x30, |
| (byte) 0x1f, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x1d, (byte) 0x23, |
| (byte) 0x04, (byte) 0x18, (byte) 0x30, (byte) 0x16, (byte) 0x80, (byte) 0x14, |
| (byte) 0x33, (byte) 0x05, (byte) 0xee, (byte) 0xfe, (byte) 0x6f, (byte) 0x60, |
| (byte) 0xc7, (byte) 0xf9, (byte) 0xa9, (byte) 0xd2, (byte) 0x73, (byte) 0x5c, |
| (byte) 0x8f, (byte) 0x6d, (byte) 0xa2, (byte) 0x2f, (byte) 0x97, (byte) 0x8e, |
| (byte) 0x5d, (byte) 0x51, (byte) 0x30, (byte) 0x0d, (byte) 0x06, (byte) 0x09, |
| (byte) 0x2a, (byte) 0x86, (byte) 0x48, (byte) 0x86, (byte) 0xf7, (byte) 0x0d, |
| (byte) 0x01, (byte) 0x01, (byte) 0x05, (byte) 0x05, (byte) 0x00, (byte) 0x03, |
| (byte) 0x81, (byte) 0x81, (byte) 0x00, (byte) 0x46, (byte) 0x42, (byte) 0xef, |
| (byte) 0x56, (byte) 0x89, (byte) 0x78, (byte) 0x90, (byte) 0x38, (byte) 0x24, |
| (byte) 0x9f, (byte) 0x8c, (byte) 0x7a, (byte) 0xce, (byte) 0x7a, (byte) 0xa5, |
| (byte) 0xb5, (byte) 0x1e, (byte) 0x74, (byte) 0x96, (byte) 0x34, (byte) 0x49, |
| (byte) 0x8b, (byte) 0xed, (byte) 0x44, (byte) 0xb3, (byte) 0xc9, (byte) 0x05, |
| (byte) 0xd7, (byte) 0x48, (byte) 0x55, (byte) 0x52, (byte) 0x59, (byte) 0x15, |
| (byte) 0x0b, (byte) 0xaa, (byte) 0x16, (byte) 0x86, (byte) 0xd2, (byte) 0x8e, |
| (byte) 0x16, (byte) 0x99, (byte) 0xe8, (byte) 0x5f, (byte) 0x11, (byte) 0x71, |
| (byte) 0x42, (byte) 0x55, (byte) 0xd1, (byte) 0xc4, (byte) 0x6f, (byte) 0x2e, |
| (byte) 0xa9, (byte) 0x64, (byte) 0x6f, (byte) 0xd8, (byte) 0xfd, (byte) 0x43, |
| (byte) 0x13, (byte) 0x24, (byte) 0xaa, (byte) 0x67, (byte) 0xe6, (byte) 0xf5, |
| (byte) 0xca, (byte) 0x80, (byte) 0x5e, (byte) 0x3a, (byte) 0x3e, (byte) 0xcc, |
| (byte) 0x4f, (byte) 0xba, (byte) 0x87, (byte) 0xe6, (byte) 0xae, (byte) 0xbf, |
| (byte) 0x8f, (byte) 0xd5, (byte) 0x28, (byte) 0x38, (byte) 0x58, (byte) 0x30, |
| (byte) 0x24, (byte) 0xf6, (byte) 0x53, (byte) 0x5b, (byte) 0x41, (byte) 0x53, |
| (byte) 0xe6, (byte) 0x45, (byte) 0xbc, (byte) 0xbe, (byte) 0xe6, (byte) 0xbb, |
| (byte) 0x5d, (byte) 0xd8, (byte) 0xa7, (byte) 0xf9, (byte) 0x64, (byte) 0x99, |
| (byte) 0x04, (byte) 0x43, (byte) 0x75, (byte) 0xd7, (byte) 0x2d, (byte) 0x32, |
| (byte) 0x0a, (byte) 0x94, (byte) 0xaf, (byte) 0x06, (byte) 0x34, (byte) 0xae, |
| (byte) 0x46, (byte) 0xbd, (byte) 0xda, (byte) 0x00, (byte) 0x0e, (byte) 0x25, |
| (byte) 0xc2, (byte) 0xf7, (byte) 0xc9, (byte) 0xc3, (byte) 0x65, (byte) 0xd2, |
| (byte) 0x08, (byte) 0x41, (byte) 0x0a, (byte) 0xf3, (byte) 0x72 |
| }; |
| |
| /** |
| * Generated from above and converted with: |
| * |
| * openssl x509 -outform d -in cacert.pem | xxd -i | sed 's/0x/(byte) 0x/g' |
| */ |
| private static final byte[] FAKE_RSA_CA_1 = { |
| (byte) 0x30, (byte) 0x82, (byte) 0x02, (byte) 0xce, (byte) 0x30, (byte) 0x82, |
| (byte) 0x02, (byte) 0x37, (byte) 0xa0, (byte) 0x03, (byte) 0x02, (byte) 0x01, |
| (byte) 0x02, (byte) 0x02, (byte) 0x09, (byte) 0x00, (byte) 0xe1, (byte) 0x6a, |
| (byte) 0xa2, (byte) 0xf4, (byte) 0x2e, (byte) 0x55, (byte) 0x48, (byte) 0x0a, |
| (byte) 0x30, (byte) 0x0d, (byte) 0x06, (byte) 0x09, (byte) 0x2a, (byte) 0x86, |
| (byte) 0x48, (byte) 0x86, (byte) 0xf7, (byte) 0x0d, (byte) 0x01, (byte) 0x01, |
| (byte) 0x05, (byte) 0x05, (byte) 0x00, (byte) 0x30, (byte) 0x4f, (byte) 0x31, |
| (byte) 0x0b, (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x04, (byte) 0x06, (byte) 0x13, (byte) 0x02, (byte) 0x55, (byte) 0x53, |
| (byte) 0x31, (byte) 0x0b, (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, |
| (byte) 0x55, (byte) 0x04, (byte) 0x08, (byte) 0x13, (byte) 0x02, (byte) 0x43, |
| (byte) 0x41, (byte) 0x31, (byte) 0x16, (byte) 0x30, (byte) 0x14, (byte) 0x06, |
| (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x07, (byte) 0x13, (byte) 0x0d, |
| (byte) 0x4d, (byte) 0x6f, (byte) 0x75, (byte) 0x6e, (byte) 0x74, (byte) 0x61, |
| (byte) 0x69, (byte) 0x6e, (byte) 0x20, (byte) 0x56, (byte) 0x69, (byte) 0x65, |
| (byte) 0x77, (byte) 0x31, (byte) 0x1b, (byte) 0x30, (byte) 0x19, (byte) 0x06, |
| (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x0a, (byte) 0x13, (byte) 0x12, |
| (byte) 0x41, (byte) 0x6e, (byte) 0x64, (byte) 0x72, (byte) 0x6f, (byte) 0x69, |
| (byte) 0x64, (byte) 0x20, (byte) 0x54, (byte) 0x65, (byte) 0x73, (byte) 0x74, |
| (byte) 0x20, (byte) 0x43, (byte) 0x61, (byte) 0x73, (byte) 0x65, (byte) 0x73, |
| (byte) 0x30, (byte) 0x1e, (byte) 0x17, (byte) 0x0d, (byte) 0x31, (byte) 0x32, |
| (byte) 0x30, (byte) 0x38, (byte) 0x31, (byte) 0x34, (byte) 0x31, (byte) 0x36, |
| (byte) 0x35, (byte) 0x35, (byte) 0x34, (byte) 0x34, (byte) 0x5a, (byte) 0x17, |
| (byte) 0x0d, (byte) 0x32, (byte) 0x32, (byte) 0x30, (byte) 0x38, (byte) 0x31, |
| (byte) 0x32, (byte) 0x31, (byte) 0x36, (byte) 0x35, (byte) 0x35, (byte) 0x34, |
| (byte) 0x34, (byte) 0x5a, (byte) 0x30, (byte) 0x4f, (byte) 0x31, (byte) 0x0b, |
| (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, |
| (byte) 0x06, (byte) 0x13, (byte) 0x02, (byte) 0x55, (byte) 0x53, (byte) 0x31, |
| (byte) 0x0b, (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x04, (byte) 0x08, (byte) 0x13, (byte) 0x02, (byte) 0x43, (byte) 0x41, |
| (byte) 0x31, (byte) 0x16, (byte) 0x30, (byte) 0x14, (byte) 0x06, (byte) 0x03, |
| (byte) 0x55, (byte) 0x04, (byte) 0x07, (byte) 0x13, (byte) 0x0d, (byte) 0x4d, |
| (byte) 0x6f, (byte) 0x75, (byte) 0x6e, (byte) 0x74, (byte) 0x61, (byte) 0x69, |
| (byte) 0x6e, (byte) 0x20, (byte) 0x56, (byte) 0x69, (byte) 0x65, (byte) 0x77, |
| (byte) 0x31, (byte) 0x1b, (byte) 0x30, (byte) 0x19, (byte) 0x06, (byte) 0x03, |
| (byte) 0x55, (byte) 0x04, (byte) 0x0a, (byte) 0x13, (byte) 0x12, (byte) 0x41, |
| (byte) 0x6e, (byte) 0x64, (byte) 0x72, (byte) 0x6f, (byte) 0x69, (byte) 0x64, |
| (byte) 0x20, (byte) 0x54, (byte) 0x65, (byte) 0x73, (byte) 0x74, (byte) 0x20, |
| (byte) 0x43, (byte) 0x61, (byte) 0x73, (byte) 0x65, (byte) 0x73, (byte) 0x30, |
| (byte) 0x81, (byte) 0x9f, (byte) 0x30, (byte) 0x0d, (byte) 0x06, (byte) 0x09, |
| (byte) 0x2a, (byte) 0x86, (byte) 0x48, (byte) 0x86, (byte) 0xf7, (byte) 0x0d, |
| (byte) 0x01, (byte) 0x01, (byte) 0x01, (byte) 0x05, (byte) 0x00, (byte) 0x03, |
| (byte) 0x81, (byte) 0x8d, (byte) 0x00, (byte) 0x30, (byte) 0x81, (byte) 0x89, |
| (byte) 0x02, (byte) 0x81, (byte) 0x81, (byte) 0x00, (byte) 0xa3, (byte) 0x72, |
| (byte) 0xab, (byte) 0xd0, (byte) 0xe4, (byte) 0xad, (byte) 0x2f, (byte) 0xe7, |
| (byte) 0xe2, (byte) 0x79, (byte) 0x07, (byte) 0x36, (byte) 0x3d, (byte) 0x0c, |
| (byte) 0x8d, (byte) 0x42, (byte) 0x9a, (byte) 0x0a, (byte) 0x33, (byte) 0x64, |
| (byte) 0xb3, (byte) 0xcd, (byte) 0xb2, (byte) 0xd7, (byte) 0x3a, (byte) 0x42, |
| (byte) 0x06, (byte) 0x77, (byte) 0x45, (byte) 0x29, (byte) 0xe9, (byte) 0xcb, |
| (byte) 0xb7, (byte) 0x4a, (byte) 0xd6, (byte) 0xee, (byte) 0xad, (byte) 0x01, |
| (byte) 0x91, (byte) 0x9b, (byte) 0x0c, (byte) 0x59, (byte) 0xa1, (byte) 0x03, |
| (byte) 0xfa, (byte) 0xf0, (byte) 0x5a, (byte) 0x7c, (byte) 0x4f, (byte) 0xf7, |
| (byte) 0x8d, (byte) 0x36, (byte) 0x0f, (byte) 0x1f, (byte) 0x45, (byte) 0x7d, |
| (byte) 0x1b, (byte) 0x31, (byte) 0xa1, (byte) 0x35, (byte) 0x0b, (byte) 0x00, |
| (byte) 0xed, (byte) 0x7a, (byte) 0xb6, (byte) 0xc8, (byte) 0x4e, (byte) 0xa9, |
| (byte) 0x86, (byte) 0x4c, (byte) 0x7b, (byte) 0x99, (byte) 0x57, (byte) 0x41, |
| (byte) 0x12, (byte) 0xef, (byte) 0x6b, (byte) 0xbc, (byte) 0x3d, (byte) 0x60, |
| (byte) 0xf2, (byte) 0x99, (byte) 0x1a, (byte) 0xcd, (byte) 0xed, (byte) 0x56, |
| (byte) 0xa4, (byte) 0xe5, (byte) 0x36, (byte) 0x9f, (byte) 0x24, (byte) 0x1f, |
| (byte) 0xdc, (byte) 0x89, (byte) 0x40, (byte) 0xc8, (byte) 0x99, (byte) 0x92, |
| (byte) 0xab, (byte) 0x4a, (byte) 0xb5, (byte) 0x61, (byte) 0x45, (byte) 0x62, |
| (byte) 0xff, (byte) 0xa3, (byte) 0x45, (byte) 0x65, (byte) 0xaf, (byte) 0xf6, |
| (byte) 0x27, (byte) 0x30, (byte) 0x51, (byte) 0x0e, (byte) 0x0e, (byte) 0xeb, |
| (byte) 0x79, (byte) 0x0c, (byte) 0xbe, (byte) 0xb3, (byte) 0x0a, (byte) 0x6f, |
| (byte) 0x29, (byte) 0x06, (byte) 0xdc, (byte) 0x2f, (byte) 0x6b, (byte) 0x51, |
| (byte) 0x02, (byte) 0x03, (byte) 0x01, (byte) 0x00, (byte) 0x01, (byte) 0xa3, |
| (byte) 0x81, (byte) 0xb1, (byte) 0x30, (byte) 0x81, (byte) 0xae, (byte) 0x30, |
| (byte) 0x1d, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x1d, (byte) 0x0e, |
| (byte) 0x04, (byte) 0x16, (byte) 0x04, (byte) 0x14, (byte) 0x33, (byte) 0x05, |
| (byte) 0xee, (byte) 0xfe, (byte) 0x6f, (byte) 0x60, (byte) 0xc7, (byte) 0xf9, |
| (byte) 0xa9, (byte) 0xd2, (byte) 0x73, (byte) 0x5c, (byte) 0x8f, (byte) 0x6d, |
| (byte) 0xa2, (byte) 0x2f, (byte) 0x97, (byte) 0x8e, (byte) 0x5d, (byte) 0x51, |
| (byte) 0x30, (byte) 0x7f, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x1d, |
| (byte) 0x23, (byte) 0x04, (byte) 0x78, (byte) 0x30, (byte) 0x76, (byte) 0x80, |
| (byte) 0x14, (byte) 0x33, (byte) 0x05, (byte) 0xee, (byte) 0xfe, (byte) 0x6f, |
| (byte) 0x60, (byte) 0xc7, (byte) 0xf9, (byte) 0xa9, (byte) 0xd2, (byte) 0x73, |
| (byte) 0x5c, (byte) 0x8f, (byte) 0x6d, (byte) 0xa2, (byte) 0x2f, (byte) 0x97, |
| (byte) 0x8e, (byte) 0x5d, (byte) 0x51, (byte) 0xa1, (byte) 0x53, (byte) 0xa4, |
| (byte) 0x51, (byte) 0x30, (byte) 0x4f, (byte) 0x31, (byte) 0x0b, (byte) 0x30, |
| (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, (byte) 0x06, |
| (byte) 0x13, (byte) 0x02, (byte) 0x55, (byte) 0x53, (byte) 0x31, (byte) 0x0b, |
| (byte) 0x30, (byte) 0x09, (byte) 0x06, (byte) 0x03, (byte) 0x55, (byte) 0x04, |
| (byte) 0x08, (byte) 0x13, (byte) 0x02, (byte) 0x43, (byte) 0x41, (byte) 0x31, |
| (byte) 0x16, (byte) 0x30, (byte) 0x14, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x04, (byte) 0x07, (byte) 0x13, (byte) 0x0d, (byte) 0x4d, (byte) 0x6f, |
| (byte) 0x75, (byte) 0x6e, (byte) 0x74, (byte) 0x61, (byte) 0x69, (byte) 0x6e, |
| (byte) 0x20, (byte) 0x56, (byte) 0x69, (byte) 0x65, (byte) 0x77, (byte) 0x31, |
| (byte) 0x1b, (byte) 0x30, (byte) 0x19, (byte) 0x06, (byte) 0x03, (byte) 0x55, |
| (byte) 0x04, (byte) 0x0a, (byte) 0x13, (byte) 0x12, (byte) 0x41, (byte) 0x6e, |
| (byte) 0x64, (byte) 0x72, (byte) 0x6f, (byte) 0x69, (byte) 0x64, (byte) 0x20, |
| (byte) 0x54, (byte) 0x65, (byte) 0x73, (byte) 0x74, (byte) 0x20, (byte) 0x43, |
| (byte) 0x61, (byte) 0x73, (byte) 0x65, (byte) 0x73, (byte) 0x82, (byte) 0x09, |
| (byte) 0x00, (byte) 0xe1, (byte) 0x6a, (byte) 0xa2, (byte) 0xf4, (byte) 0x2e, |
| (byte) 0x55, (byte) 0x48, (byte) 0x0a, (byte) 0x30, (byte) 0x0c, (byte) 0x06, |
| (byte) 0x03, (byte) 0x55, (byte) 0x1d, (byte) 0x13, (byte) 0x04, (byte) 0x05, |
| (byte) 0x30, (byte) 0x03, (byte) 0x01, (byte) 0x01, (byte) 0xff, (byte) 0x30, |
| (byte) 0x0d, (byte) 0x06, (byte) 0x09, (byte) 0x2a, (byte) 0x86, (byte) 0x48, |
| (byte) 0x86, (byte) 0xf7, (byte) 0x0d, (byte) 0x01, (byte) 0x01, (byte) 0x05, |
| (byte) 0x05, (byte) 0x00, (byte) 0x03, (byte) 0x81, (byte) 0x81, (byte) 0x00, |
| (byte) 0x8c, (byte) 0x30, (byte) 0x42, (byte) 0xfa, (byte) 0xeb, (byte) 0x1a, |
| (byte) 0x26, (byte) 0xeb, (byte) 0xda, (byte) 0x56, (byte) 0x32, (byte) 0xf2, |
| (byte) 0x9d, (byte) 0xa5, (byte) 0x24, (byte) 0xd8, (byte) 0x3a, (byte) 0xda, |
| (byte) 0x30, (byte) 0xa6, (byte) 0x8b, (byte) 0x46, (byte) 0xfe, (byte) 0xfe, |
| (byte) 0xdb, (byte) 0xf1, (byte) 0xe6, (byte) 0xe1, (byte) 0x7c, (byte) 0x1b, |
| (byte) 0xe7, (byte) 0x77, (byte) 0x00, (byte) 0xa1, (byte) 0x1c, (byte) 0x19, |
| (byte) 0x17, (byte) 0x73, (byte) 0xb0, (byte) 0xf0, (byte) 0x9d, (byte) 0xf3, |
| (byte) 0x4f, (byte) 0xb6, (byte) 0xbc, (byte) 0xc7, (byte) 0x47, (byte) 0x85, |
| (byte) 0x2a, (byte) 0x4a, (byte) 0xa1, (byte) 0xa5, (byte) 0x58, (byte) 0xf5, |
| (byte) 0xc5, (byte) 0x1a, (byte) 0x51, (byte) 0xb1, (byte) 0x04, (byte) 0x80, |
| (byte) 0xee, (byte) 0x3a, (byte) 0xec, (byte) 0x2f, (byte) 0xe1, (byte) 0xfd, |
| (byte) 0x58, (byte) 0xeb, (byte) 0xed, (byte) 0x82, (byte) 0x9e, (byte) 0x38, |
| (byte) 0xa3, (byte) 0x24, (byte) 0x75, (byte) 0xf7, (byte) 0x3e, (byte) 0xc2, |
| (byte) 0xc5, (byte) 0x27, (byte) 0xeb, (byte) 0x6f, (byte) 0x7b, (byte) 0x50, |
| (byte) 0xda, (byte) 0x43, (byte) 0xdc, (byte) 0x3b, (byte) 0x0b, (byte) 0x6f, |
| (byte) 0x78, (byte) 0x8f, (byte) 0xb0, (byte) 0x66, (byte) 0xe1, (byte) 0x12, |
| (byte) 0x87, (byte) 0x5f, (byte) 0x97, (byte) 0x7b, (byte) 0xca, (byte) 0x14, |
| (byte) 0x79, (byte) 0xf7, (byte) 0xe8, (byte) 0x6c, (byte) 0x72, (byte) 0xdb, |
| (byte) 0x91, (byte) 0x65, (byte) 0x17, (byte) 0x54, (byte) 0xe0, (byte) 0x74, |
| (byte) 0x1d, (byte) 0xac, (byte) 0x47, (byte) 0x04, (byte) 0x12, (byte) 0xe0, |
| (byte) 0xc3, (byte) 0x66, (byte) 0x19, (byte) 0x05, (byte) 0x2e, (byte) 0x7e, |
| (byte) 0xf1, (byte) 0x61 |
| }; |
| |
| /** |
| * Generated from above and converted with: |
| * |
| * openssl pkcs8 -topk8 -outform d -in userkey.pem -nocrypt | xxd -i | sed 's/0x/(byte) 0x/g' |
| */ |
| private static final byte[] FAKE_RSA_KEY_1 = new byte[] { |
| (byte) 0x30, (byte) 0x82, (byte) 0x02, (byte) 0x78, (byte) 0x02, (byte) 0x01, |
| (byte) 0x00, (byte) 0x30, (byte) 0x0d, (byte) 0x06, (byte) 0x09, (byte) 0x2a, |
| (byte) 0x86, (byte) 0x48, (byte) 0x86, (byte) 0xf7, (byte) 0x0d, (byte) 0x01, |
| (byte) 0x01, (byte) 0x01, (byte) 0x05, (byte) 0x00, (byte) 0x04, (byte) 0x82, |
| (byte) 0x02, (byte) 0x62, (byte) 0x30, (byte) 0x82, (byte) 0x02, (byte) 0x5e, |
| (byte) 0x02, (byte) 0x01, (byte) 0x00, (byte) 0x02, (byte) 0x81, (byte) 0x81, |
| (byte) 0x00, (byte) 0xce, (byte) 0x29, (byte) 0xeb, (byte) 0xf6, (byte) 0x5b, |
| (byte) 0x25, (byte) 0xdc, (byte) 0xa1, (byte) 0xa6, (byte) 0x2c, (byte) 0x66, |
| (byte) 0xcb, (byte) 0x20, (byte) 0x90, (byte) 0x27, (byte) 0x86, (byte) 0x8a, |
| (byte) 0x44, (byte) 0x71, (byte) 0x50, (byte) 0xda, (byte) 0xd3, (byte) 0x02, |
| (byte) 0x77, (byte) 0x55, (byte) 0xe9, (byte) 0xe8, (byte) 0x08, (byte) 0xf3, |
| (byte) 0x36, (byte) 0x9a, (byte) 0xae, (byte) 0xab, (byte) 0x04, (byte) 0x6d, |
| (byte) 0x00, (byte) 0x99, (byte) 0xbf, (byte) 0x7d, (byte) 0x0f, (byte) 0x67, |
| (byte) 0x8b, (byte) 0x1d, (byte) 0xd4, (byte) 0x2b, (byte) 0x7c, (byte) 0xcb, |
| (byte) 0xcd, (byte) 0x33, (byte) 0xc7, (byte) 0x84, (byte) 0x30, (byte) 0xe2, |
| (byte) 0x45, (byte) 0x21, (byte) 0xb3, (byte) 0x75, (byte) 0xf5, (byte) 0x79, |
| (byte) 0x02, (byte) 0xda, (byte) 0x50, (byte) 0xa3, (byte) 0x8b, (byte) 0xce, |
| (byte) 0xc3, (byte) 0x8e, (byte) 0x0f, (byte) 0x25, (byte) 0xeb, (byte) 0x08, |
| (byte) 0x2c, (byte) 0xdd, (byte) 0x1c, (byte) 0xcf, (byte) 0xff, (byte) 0x3b, |
| (byte) 0xde, (byte) 0xb6, (byte) 0xaa, (byte) 0x2a, (byte) 0xa9, (byte) 0xc4, |
| (byte) 0x8a, (byte) 0x24, (byte) 0x24, (byte) 0xe6, (byte) 0x29, (byte) 0x0d, |
| (byte) 0x98, (byte) 0x4c, (byte) 0x32, (byte) 0xa1, (byte) 0x7b, (byte) 0x23, |
| (byte) 0x2b, (byte) 0x42, (byte) 0x30, (byte) 0xee, (byte) 0x78, (byte) 0x08, |
| (byte) 0x47, (byte) 0xad, (byte) 0xf2, (byte) 0x96, (byte) 0xd5, (byte) 0xf1, |
| (byte) 0x62, (byte) 0x42, (byte) 0x2d, (byte) 0x35, (byte) 0x19, (byte) 0xb4, |
| (byte) 0x3c, (byte) 0xc9, (byte) 0xc3, (byte) 0x5f, (byte) 0x03, (byte) 0x16, |
| (byte) 0x3a, (byte) 0x23, (byte) 0xac, (byte) 0xcb, (byte) 0xce, (byte) 0x9e, |
| (byte) 0x51, (byte) 0x2e, (byte) 0x6d, (byte) 0x02, (byte) 0x03, (byte) 0x01, |
| (byte) 0x00, (byte) 0x01, (byte) 0x02, (byte) 0x81, (byte) 0x80, (byte) 0x16, |
| (byte) 0x59, (byte) 0xc3, (byte) 0x24, (byte) 0x1d, (byte) 0x33, (byte) 0x98, |
| (byte) 0x9c, (byte) 0xc9, (byte) 0xc8, (byte) 0x2c, (byte) 0x88, (byte) 0xbf, |
| (byte) 0x0a, (byte) 0x01, (byte) 0xce, (byte) 0xfb, (byte) 0x34, (byte) 0x7a, |
| (byte) 0x58, (byte) 0x7a, (byte) 0xb0, (byte) 0xbf, (byte) 0xa6, (byte) 0xb2, |
| (byte) 0x60, (byte) 0xbe, (byte) 0x70, (byte) 0x21, (byte) 0xf5, (byte) 0xfc, |
| (byte) 0x85, (byte) 0x0d, (byte) 0x33, (byte) 0x58, (byte) 0xa1, (byte) 0xe5, |
| (byte) 0x09, (byte) 0x36, (byte) 0x84, (byte) 0xb2, (byte) 0x04, (byte) 0x0a, |
| (byte) 0x02, (byte) 0xd3, (byte) 0x88, (byte) 0x1f, (byte) 0x0c, (byte) 0x2b, |
| (byte) 0x1d, (byte) 0xe9, (byte) 0x3d, (byte) 0xe7, (byte) 0x79, (byte) 0xf9, |
| (byte) 0x32, (byte) 0x5c, (byte) 0x8a, (byte) 0x75, (byte) 0x49, (byte) 0x12, |
| (byte) 0xe4, (byte) 0x05, (byte) 0x26, (byte) 0xd4, (byte) 0x2e, (byte) 0x9e, |
| (byte) 0x1f, (byte) 0xcc, (byte) 0x54, (byte) 0xad, (byte) 0x33, (byte) 0x8d, |
| (byte) 0x99, (byte) 0x00, (byte) 0xdc, (byte) 0xf5, (byte) 0xb4, (byte) 0xa2, |
| (byte) 0x2f, (byte) 0xba, (byte) 0xe5, (byte) 0x62, (byte) 0x30, (byte) 0x6d, |
| (byte) 0xe6, (byte) 0x3d, (byte) 0xeb, (byte) 0x24, (byte) 0xc2, (byte) 0xdc, |
| (byte) 0x5f, (byte) 0xb7, (byte) 0x16, (byte) 0x35, (byte) 0xa3, (byte) 0x98, |
| (byte) 0x98, (byte) 0xa8, (byte) 0xef, (byte) 0xe8, (byte) 0xc4, (byte) 0x96, |
| (byte) 0x6d, (byte) 0x38, (byte) 0xab, (byte) 0x26, (byte) 0x6d, (byte) 0x30, |
| (byte) 0xc2, (byte) 0xa0, (byte) 0x44, (byte) 0xe4, (byte) 0xff, (byte) 0x7e, |
| (byte) 0xbe, (byte) 0x7c, (byte) 0x33, (byte) 0xa5, (byte) 0x10, (byte) 0xad, |
| (byte) 0xd7, (byte) 0x1e, (byte) 0x13, (byte) 0x20, (byte) 0xb3, (byte) 0x1f, |
| (byte) 0x41, (byte) 0x02, (byte) 0x41, (byte) 0x00, (byte) 0xf1, (byte) 0x89, |
| (byte) 0x07, (byte) 0x0f, (byte) 0xe8, (byte) 0xcf, (byte) 0xab, (byte) 0x13, |
| (byte) 0x2a, (byte) 0x8f, (byte) 0x88, (byte) 0x80, (byte) 0x11, (byte) 0x9a, |
| (byte) 0x79, (byte) 0xb6, (byte) 0x59, (byte) 0x3a, (byte) 0x50, (byte) 0x6e, |
| (byte) 0x57, (byte) 0x37, (byte) 0xab, (byte) 0x2a, (byte) 0xd2, (byte) 0xaa, |
| (byte) 0xd9, (byte) 0x72, (byte) 0x73, (byte) 0xff, (byte) 0x8b, (byte) 0x47, |
| (byte) 0x76, (byte) 0xdd, (byte) 0xdc, (byte) 0xf5, (byte) 0x97, (byte) 0x44, |
| (byte) 0x3a, (byte) 0x78, (byte) 0xbe, (byte) 0x17, (byte) 0xb4, (byte) 0x22, |
| (byte) 0x6f, (byte) 0xe5, (byte) 0x23, (byte) 0x70, (byte) 0x1d, (byte) 0x10, |
| (byte) 0x5d, (byte) 0xba, (byte) 0x16, (byte) 0x81, (byte) 0xf1, (byte) 0x45, |
| (byte) 0xce, (byte) 0x30, (byte) 0xb4, (byte) 0xab, (byte) 0x80, (byte) 0xe4, |
| (byte) 0x98, (byte) 0x31, (byte) 0x02, (byte) 0x41, (byte) 0x00, (byte) 0xda, |
| (byte) 0x82, (byte) 0x9d, (byte) 0x3f, (byte) 0xca, (byte) 0x2f, (byte) 0xe1, |
| (byte) 0xd4, (byte) 0x86, (byte) 0x77, (byte) 0x48, (byte) 0xa6, (byte) 0xab, |
| (byte) 0xab, (byte) 0x1c, (byte) 0x42, (byte) 0x5c, (byte) 0xd5, (byte) 0xc7, |
| (byte) 0x46, (byte) 0x59, (byte) 0x91, (byte) 0x3f, (byte) 0xfc, (byte) 0xcc, |
| (byte) 0xec, (byte) 0xc2, (byte) 0x40, (byte) 0x12, (byte) 0x2c, (byte) 0x8d, |
| (byte) 0x1f, (byte) 0xa2, (byte) 0x18, (byte) 0x88, (byte) 0xee, (byte) 0x82, |
| (byte) 0x4a, (byte) 0x5a, (byte) 0x5e, (byte) 0x88, (byte) 0x20, (byte) 0xe3, |
| (byte) 0x7b, (byte) 0xe0, (byte) 0xd8, (byte) 0x3a, (byte) 0x52, (byte) 0x9a, |
| (byte) 0x26, (byte) 0x6a, (byte) 0x04, (byte) 0xec, (byte) 0xe8, (byte) 0xb9, |
| (byte) 0x48, (byte) 0x40, (byte) 0xe1, (byte) 0xe1, (byte) 0x83, (byte) 0xa6, |
| (byte) 0x67, (byte) 0xa6, (byte) 0xfd, (byte) 0x02, (byte) 0x41, (byte) 0x00, |
| (byte) 0x89, (byte) 0x72, (byte) 0x3e, (byte) 0xb0, (byte) 0x90, (byte) 0xfd, |
| (byte) 0x4c, (byte) 0x0e, (byte) 0xd6, (byte) 0x13, (byte) 0x63, (byte) 0xcb, |
| (byte) 0xed, (byte) 0x38, (byte) 0x88, (byte) 0xb6, (byte) 0x79, (byte) 0xc4, |
| (byte) 0x33, (byte) 0x6c, (byte) 0xf6, (byte) 0xf8, (byte) 0xd8, (byte) 0xd0, |
| (byte) 0xbf, (byte) 0x9d, (byte) 0x35, (byte) 0xac, (byte) 0x69, (byte) 0xd2, |
| (byte) 0x2b, (byte) 0xc1, (byte) 0xf9, (byte) 0x24, (byte) 0x7b, (byte) 0xce, |
| (byte) 0xcd, (byte) 0xcb, (byte) 0xa7, (byte) 0xb2, (byte) 0x7a, (byte) 0x0a, |
| (byte) 0x27, (byte) 0x19, (byte) 0xc9, (byte) 0xaf, (byte) 0x0d, (byte) 0x21, |
| (byte) 0x89, (byte) 0x88, (byte) 0x7c, (byte) 0xad, (byte) 0x9e, (byte) 0x8d, |
| (byte) 0x47, (byte) 0x6d, (byte) 0x3f, (byte) 0xce, (byte) 0x7b, (byte) 0xa1, |
| (byte) 0x74, (byte) 0xf1, (byte) 0xa0, (byte) 0xa1, (byte) 0x02, (byte) 0x41, |
| (byte) 0x00, (byte) 0xd9, (byte) 0xa8, (byte) 0xf5, (byte) 0xfe, (byte) 0xce, |
| (byte) 0xe6, (byte) 0x77, (byte) 0x6b, (byte) 0xfe, (byte) 0x2d, (byte) 0xe0, |
| (byte) 0x1e, (byte) 0xb6, (byte) 0x2e, (byte) 0x12, (byte) 0x4e, (byte) 0x40, |
| (byte) 0xaf, (byte) 0x6a, (byte) 0x7b, (byte) 0x37, (byte) 0x49, (byte) 0x2a, |
| (byte) 0x96, (byte) 0x25, (byte) 0x83, (byte) 0x49, (byte) 0xd4, (byte) 0x0c, |
| (byte) 0xc6, (byte) 0x78, (byte) 0x25, (byte) 0x24, (byte) 0x90, (byte) 0x90, |
| (byte) 0x06, (byte) 0x15, (byte) 0x9e, (byte) 0xfe, (byte) 0xf9, (byte) 0xdf, |
| (byte) 0x5b, (byte) 0xf3, (byte) 0x7e, (byte) 0x38, (byte) 0x70, (byte) 0xeb, |
| (byte) 0x57, (byte) 0xd0, (byte) 0xd9, (byte) 0xa7, (byte) 0x0e, (byte) 0x14, |
| (byte) 0xf7, (byte) 0x95, (byte) 0x68, (byte) 0xd5, (byte) 0xc8, (byte) 0xab, |
| (byte) 0x9d, (byte) 0x3a, (byte) 0x2b, (byte) 0x51, (byte) 0xf9, (byte) 0x02, |
| (byte) 0x41, (byte) 0x00, (byte) 0x96, (byte) 0xdf, (byte) 0xe9, (byte) 0x67, |
| (byte) 0x6c, (byte) 0xdc, (byte) 0x90, (byte) 0x14, (byte) 0xb4, (byte) 0x1d, |
| (byte) 0x22, (byte) 0x33, (byte) 0x4a, (byte) 0x31, (byte) 0xc1, (byte) 0x9d, |
| (byte) 0x2e, (byte) 0xff, (byte) 0x9a, (byte) 0x2a, (byte) 0x95, (byte) 0x4b, |
| (byte) 0x27, (byte) 0x74, (byte) 0xcb, (byte) 0x21, (byte) 0xc3, (byte) 0xd2, |
| (byte) 0x0b, (byte) 0xb2, (byte) 0x46, (byte) 0x87, (byte) 0xf8, (byte) 0x28, |
| (byte) 0x01, (byte) 0x8b, (byte) 0xd8, (byte) 0xb9, (byte) 0x4b, (byte) 0xcd, |
| (byte) 0x9a, (byte) 0x96, (byte) 0x41, (byte) 0x0e, (byte) 0x36, (byte) 0x6d, |
| (byte) 0x40, (byte) 0x42, (byte) 0xbc, (byte) 0xd9, (byte) 0xd3, (byte) 0x7b, |
| (byte) 0xbc, (byte) 0xa7, (byte) 0x92, (byte) 0x90, (byte) 0xdd, (byte) 0xa1, |
| (byte) 0x9c, (byte) 0xce, (byte) 0xa1, (byte) 0x87, (byte) 0x11, (byte) 0x51 |
| }; |
| |
| @Rule |
| public ActivityScenarioRule mActivityScenarioRule = |
| new ActivityScenarioRule(WebViewCtsActivity.class); |
| |
| private WebViewCtsActivity mActivity; |
| |
| private WebView mWebView; |
| private SharedSdkWebServer mWebServer; |
| private WebViewOnUiThread mOnUiThread; |
| |
| @Before |
| public void setUp() throws Exception { |
| mWebView = getTestEnvironment().getWebView(); |
| mOnUiThread = new WebViewOnUiThread(mWebView); |
| } |
| |
| @After |
| public void cleanup() throws Exception { |
| if (mOnUiThread != null) { |
| mOnUiThread.cleanUp(); |
| } |
| if (mWebServer != null) { |
| stopWebServer(mWebServer); |
| } |
| mActivity = null; |
| } |
| |
| @Override |
| protected SharedWebViewTestEnvironment createTestEnvironment() { |
| Assume.assumeTrue("WebView is not available", NullWebViewUtils.isWebViewAvailable()); |
| |
| SharedWebViewTestEnvironment.Builder builder = new SharedWebViewTestEnvironment.Builder(); |
| |
| mActivityScenarioRule |
| .getScenario() |
| .onActivity( |
| activity -> { |
| mActivity = (WebViewCtsActivity) activity; |
| |
| WebView webView = mActivity.getWebView(); |
| builder.setHostAppInvoker( |
| SharedWebViewTestEnvironment.createHostAppInvoker( |
| mActivity)) |
| .setContext(mActivity) |
| .setWebView(webView); |
| }); |
| |
| SharedWebViewTestEnvironment environment = builder.build(); |
| |
| if (environment.getWebView() != null) { |
| new PollingCheck(WebkitUtils.TEST_TIMEOUT_MS) { |
| @Override |
| protected boolean check() { |
| return mActivity.hasWindowFocus(); |
| } |
| }.run(); |
| File f = mActivity.getFileStreamPath("snapshot"); |
| if (f.exists()) { |
| f.delete(); |
| } |
| } |
| return environment; |
| } |
| |
| private void stopWebServer(SharedSdkWebServer webServer) throws Exception { |
| assertNotNull(webServer); |
| ThreadPolicy oldPolicy = StrictMode.getThreadPolicy(); |
| ThreadPolicy tmpPolicy = new ThreadPolicy.Builder(oldPolicy) |
| .permitNetwork() |
| .build(); |
| StrictMode.setThreadPolicy(tmpPolicy); |
| webServer.shutdown(); |
| webServer = null; |
| StrictMode.setThreadPolicy(oldPolicy); |
| } |
| |
| @Test |
| public void testInsecureSiteClearsCertificate() throws Throwable { |
| final class MockWebViewClient extends WaitForLoadedClient { |
| public MockWebViewClient() { |
| super(mOnUiThread); |
| } |
| @Override |
| public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { |
| handler.proceed(); |
| } |
| } |
| |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| mOnUiThread.setWebViewClient(new MockWebViewClient()); |
| mOnUiThread.loadUrlAndWaitForCompletion( |
| mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL)); |
| SslCertificate cert = mOnUiThread.getCertificate(); |
| assertNotNull(cert); |
| assertEquals("Android", cert.getIssuedTo().getUName()); |
| |
| stopWebServer(mWebServer); |
| |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.INSECURE); |
| mOnUiThread.loadUrlAndWaitForCompletion( |
| mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL)); |
| assertNull(mOnUiThread.getCertificate()); |
| } |
| |
| @Test |
| public void testSecureSiteSetsCertificate() throws Throwable { |
| SharedWebViewTestEnvironment testEnvironment = getTestEnvironment(); |
| |
| final class MockWebViewClient extends WaitForLoadedClient { |
| public MockWebViewClient() { |
| super(mOnUiThread); |
| } |
| @Override |
| public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { |
| handler.proceed(); |
| } |
| } |
| |
| mWebServer = testEnvironment.getSetupWebServer(SslMode.INSECURE); |
| mOnUiThread.loadUrlAndWaitForCompletion( |
| mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL)); |
| assertNull(mOnUiThread.getCertificate()); |
| |
| stopWebServer(mWebServer); |
| |
| mWebServer = testEnvironment.getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| mOnUiThread.setWebViewClient(new MockWebViewClient()); |
| mOnUiThread.loadUrlAndWaitForCompletion( |
| mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL)); |
| SslCertificate cert = mOnUiThread.getCertificate(); |
| assertNotNull(cert); |
| assertEquals("Android", cert.getIssuedTo().getUName()); |
| } |
| |
| @Test |
| public void testClearSslPreferences() throws Throwable { |
| // Load the first page. We expect a call to |
| // WebViewClient.onReceivedSslError(). |
| final SslErrorWebViewClient webViewClient = new SslErrorWebViewClient(mOnUiThread); |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| mOnUiThread.setWebViewClient(webViewClient); |
| mOnUiThread.clearSslPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertTrue("onReceivedSslError should be called", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| |
| // Load the page again. We expect another call to |
| // WebViewClient.onReceivedSslError() since we cleared sslpreferences. |
| mOnUiThread.clearSslPreferences(); |
| webViewClient.resetCallCounts(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertTrue("onReceivedSslError should be called again after clearing SSL preferences", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| |
| // Load the page once again, without clearing the sslpreferences. |
| // Make sure we do not get the callback. |
| webViewClient.resetCallCounts(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertFalse("onReceivedSslError should not be called when SSL preferences are not cleared", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testOnReceivedSslError() throws Throwable { |
| final class MockWebViewClient extends WaitForLoadedClient { |
| private String mErrorUrl; |
| private WebView mWebView; |
| |
| public MockWebViewClient() { |
| super(mOnUiThread); |
| } |
| @Override |
| public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { |
| mWebView = view; |
| mErrorUrl = error.getUrl(); |
| handler.proceed(); |
| } |
| public String errorUrl() { |
| return mErrorUrl; |
| } |
| public WebView webView() { |
| return mWebView; |
| } |
| } |
| |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| final String errorUrl = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final MockWebViewClient webViewClient = new MockWebViewClient(); |
| mOnUiThread.setWebViewClient(webViewClient); |
| mOnUiThread.clearSslPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(errorUrl); |
| |
| assertEquals(mWebView, webViewClient.webView()); |
| assertEquals(errorUrl, webViewClient.errorUrl()); |
| } |
| |
| @Test |
| public void testOnReceivedSslErrorProceed() throws Throwable { |
| final class MockWebViewClient extends WaitForLoadedClient { |
| public MockWebViewClient() { |
| super(mOnUiThread); |
| } |
| @Override |
| public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { |
| handler.proceed(); |
| } |
| } |
| |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| mOnUiThread.setWebViewClient(new MockWebViewClient()); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testOnReceivedSslErrorCancel() throws Throwable { |
| final class MockWebViewClient extends WaitForLoadedClient { |
| public MockWebViewClient() { |
| super(mOnUiThread); |
| } |
| @Override |
| public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { |
| handler.cancel(); |
| } |
| } |
| |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| mOnUiThread.setWebViewClient(new MockWebViewClient()); |
| mOnUiThread.clearSslPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertNotEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testSslErrorProceedResponseReusedForSameHost() throws Throwable { |
| // Load the first page. We expect a call to |
| // WebViewClient.onReceivedSslError(). |
| final SslErrorWebViewClient webViewClient = new SslErrorWebViewClient(mOnUiThread); |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| final String firstUrl = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL1); |
| mOnUiThread.setWebViewClient(webViewClient); |
| mOnUiThread.clearSslPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(firstUrl); |
| assertTrue("onReceivedSslError should be called on loading first page", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| |
| // Load the second page. We don't expect a call to |
| // WebViewClient.onReceivedSslError(), but the page should load. |
| webViewClient.resetCallCounts(); |
| final String sameHostUrl = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL2); |
| mOnUiThread.loadUrlAndWaitForCompletion(sameHostUrl); |
| assertFalse("onReceivedSslError should not be called on loading second page", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| assertEquals("Second page", mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testSslErrorProceedResponseNotReusedForDifferentHost() throws Throwable { |
| // Load the first page. We expect a call to |
| // WebViewClient.onReceivedSslError(). |
| final SslErrorWebViewClient webViewClient = new SslErrorWebViewClient(mOnUiThread); |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NO_CLIENT_AUTH); |
| final String firstUrl = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL1); |
| mOnUiThread.setWebViewClient(webViewClient); |
| mOnUiThread.clearSslPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(firstUrl); |
| assertTrue("onReceivedSslError should be called when request is sent to localhost", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| |
| // Load the second page. We expect another call to |
| // WebViewClient.onReceivedSslError(). |
| webViewClient.resetCallCounts(); |
| // The test server uses the host "localhost". "127.0.0.1" works as an |
| // alias, but will be considered unique by the WebView. |
| final String differentHostUrl = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL2).replace( |
| "localhost", "127.0.0.1"); |
| mOnUiThread.loadUrlAndWaitForCompletion(differentHostUrl); |
| assertTrue("onReceivedSslError should be called when request is sent to 127.0.0.1", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| assertEquals("Second page", mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testSecureServerRequestingClientCertDoesNotCancelRequest() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.WANTS_CLIENT_AUTH); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final SslErrorWebViewClient webViewClient = new SslErrorWebViewClient(mOnUiThread); |
| mOnUiThread.setWebViewClient(webViewClient); |
| mOnUiThread.clearSslPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| // Page loaded OK... |
| assertTrue("onReceivedSslError should be called", |
| webViewClient.wasOnReceivedSslErrorCalled()); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| assertEquals(0, webViewClient.onReceivedErrorCode()); |
| } |
| |
| @Test |
| public void testSecureServerRequiringClientCertDoesCancelRequest() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NEEDS_CLIENT_AUTH); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final SslErrorWebViewClient webViewClient = new SslErrorWebViewClient(mOnUiThread); |
| mOnUiThread.setWebViewClient(webViewClient); |
| mOnUiThread.clearSslPreferences(); |
| loadUrlUntilError(webViewClient, url, WebViewClient.ERROR_FAILED_SSL_HANDSHAKE); |
| // Page NOT loaded OK... |
| // |
| // In this test, we expect both a recoverable and non-recoverable error: |
| // |
| // 1. WebView does not trust the test server's certificate. This is a recoverable error, so |
| // WebView invokes #onReceivedSslError (and the WebViewClient calls #proceed). We don't |
| // specifically intend to test this part of the scenario, but we can't easily mock out |
| // WebView's certificate roots. |
| // 2. WebView proceeds with the handshake without providing client authentication. The |
| // server fails the client. This is non-recoverable, so WebView invokes |
| // #onReceivedError. |
| // |
| // We only assert the second error, since earlier WebView versions had a bug in which |
| // WebView hit error 2 first, which prevented it from hitting error 1. |
| assertFalse("Title should not be updated, since page load should have failed", |
| TestHtmlConstants.HELLO_WORLD_TITLE.equals(mOnUiThread.getTitle())); |
| } |
| |
| @Test |
| public void testProceedClientCertRequest() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NEEDS_CLIENT_AUTH); |
| String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final ClientCertWebViewClient webViewClient = new ClientCertWebViewClient(mOnUiThread); |
| mOnUiThread.setWebViewClient(webViewClient); |
| clearClientCertPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| |
| // Test that the user's response for this server is kept in cache. Load a different |
| // page from the same server and make sure we don't receive a client cert request callback. |
| webViewClient.resetCallCounts(); |
| url = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL1); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HTML_URL1_TITLE, mOnUiThread.getTitle()); |
| assertEquals("onReceivedClientCertRequest should not be called", |
| 0, webViewClient.getClientCertRequestCount()); |
| |
| // Now clear the cache and reload the page. We should receive a new callback. |
| webViewClient.resetCallCounts(); |
| clearClientCertPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HTML_URL1_TITLE, mOnUiThread.getTitle()); |
| assertEquals("onReceivedClientCertRequest should be called once", |
| 1, webViewClient.getClientCertRequestCount()); |
| } |
| |
| @Test |
| public void testProceedClientCertRequestKeyWithAndroidKeystoreKey() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NEEDS_CLIENT_AUTH); |
| String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final ClientCertWebViewClient webViewClient = new ClientCertWebViewClient( |
| mOnUiThread, |
| true // use an Android Keystore backed private key |
| ); |
| mOnUiThread.setWebViewClient(webViewClient); |
| clearClientCertPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| |
| // Test that the user's response for this server is kept in cache. Load a different |
| // page from the same server and make sure we don't receive a client cert request callback. |
| webViewClient.resetCallCounts(); |
| url = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL1); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HTML_URL1_TITLE, mOnUiThread.getTitle()); |
| assertEquals("onReceivedClientCertRequest should not be called", |
| 0, webViewClient.getClientCertRequestCount()); |
| |
| // Now clear the cache and reload the page. We should receive a new callback. |
| webViewClient.resetCallCounts(); |
| clearClientCertPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HTML_URL1_TITLE, mOnUiThread.getTitle()); |
| assertEquals("onReceivedClientCertRequest should be called once", |
| 1, webViewClient.getClientCertRequestCount()); |
| } |
| |
| /** |
| * Loads a url until a specific error code. This is meant to be used when two different errors |
| * can race. Specifically, this is meant to be used to workaround the TLS 1.3 (Android Q and |
| * above) race condition where a server <b>may</b> close the connection at the same time the |
| * client sends the HTTP request, emitting {@code ERROR_CONNECT} instead of {@code |
| * ERROR_FAILED_SSL_HANDSHAKE}. |
| */ |
| private void loadUrlUntilError(SslErrorWebViewClient client, String url, |
| int expectedErrorCode) { |
| int maxTries = 40; |
| for (int i = 0; i < maxTries; i++) { |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| if (client.onReceivedErrorCode() == expectedErrorCode) { |
| return; |
| } |
| } |
| throw new RuntimeException( |
| "Reached max number of tries and never saw error " + expectedErrorCode); |
| } |
| |
| @Test |
| public void testIgnoreClientCertRequest() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NEEDS_CLIENT_AUTH); |
| String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final ClientCertWebViewClient webViewClient = new ClientCertWebViewClient(mOnUiThread); |
| mOnUiThread.setWebViewClient(webViewClient); |
| clearClientCertPreferences(); |
| // Ignore the request. Load should fail. |
| webViewClient.setAction(ClientCertWebViewClient.IGNORE); |
| loadUrlUntilError(webViewClient, url, WebViewClient.ERROR_FAILED_SSL_HANDSHAKE); |
| assertNotEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| // At least one of the loads done by loadUrlUntilError() should produce |
| // onReceivedClientCertRequest. |
| assertTrue("onReceivedClientCertRequest should be called at least once", |
| webViewClient.getClientCertRequestCount() >= 1); |
| |
| // Load a different page from the same domain, ignoring the request. We should get a callback, |
| // and load should fail. |
| webViewClient.resetCallCounts(); |
| url = mWebServer.getAssetUrl(TestHtmlConstants.HTML_URL1); |
| loadUrlUntilError(webViewClient, url, WebViewClient.ERROR_FAILED_SSL_HANDSHAKE); |
| assertNotEquals(TestHtmlConstants.HTML_URL1_TITLE, mOnUiThread.getTitle()); |
| // At least one of the loads done by loadUrlUntilError() should produce |
| // onReceivedClientCertRequest. |
| assertTrue("onReceivedClientCertRequest should be called at least once for second URL", |
| webViewClient.getClientCertRequestCount() >= 1); |
| |
| // Reload, proceeding the request. Load should succeed. |
| webViewClient.setAction(ClientCertWebViewClient.PROCEED); |
| url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| assertEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testCancelClientCertRequest() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NEEDS_CLIENT_AUTH); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final ClientCertWebViewClient webViewClient = new ClientCertWebViewClient(mOnUiThread); |
| mOnUiThread.setWebViewClient(webViewClient); |
| clearClientCertPreferences(); |
| // Cancel the request. Load should fail. |
| webViewClient.setAction(ClientCertWebViewClient.CANCEL); |
| loadUrlUntilError(webViewClient, url, WebViewClient.ERROR_FAILED_SSL_HANDSHAKE); |
| assertNotEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| // At least one of the loads done by loadUrlUntilError() should produce |
| // onReceivedClientCertRequest. |
| assertTrue("onReceivedClientCertRequest should be called at least once", |
| webViewClient.getClientCertRequestCount() >= 1); |
| |
| // Reload. The request should fail without generating a new callback. |
| webViewClient.resetCallCounts(); |
| loadUrlUntilError(webViewClient, url, WebViewClient.ERROR_FAILED_SSL_HANDSHAKE); |
| // None of the loads done by loadUrlUntilError() should produce onReceivedClientCertRequest. |
| assertEquals("onReceivedClientCertRequest should not be called for reload", |
| 0, webViewClient.getClientCertRequestCount()); |
| assertNotEquals(TestHtmlConstants.HELLO_WORLD_TITLE, mOnUiThread.getTitle()); |
| } |
| |
| @Test |
| public void testClientCertIssuersReceivedCorrectly() throws Throwable { |
| mWebServer = getTestEnvironment().getSetupWebServer(SslMode.NEEDS_CLIENT_AUTH, |
| FAKE_RSA_CA_1, 0, 0); |
| final String url = mWebServer.getAssetUrl(TestHtmlConstants.HELLO_WORLD_URL); |
| final ClientCertWebViewClient webViewClient = new ClientCertWebViewClient(mOnUiThread); |
| mOnUiThread.setWebViewClient(webViewClient); |
| clearClientCertPreferences(); |
| mOnUiThread.loadUrlAndWaitForCompletion(url); |
| // Verify that issuers sent by the server are received correctly |
| CertificateFactory certFactory = CertificateFactory.getInstance("X.509"); |
| X509Certificate cert = (X509Certificate) certFactory.generateCertificate( |
| new ByteArrayInputStream(FAKE_RSA_CA_1)); |
| Principal[] principals = webViewClient.getPrincipals(); |
| assertEquals(1, principals.length); |
| // TODO: should we issue getIssuerX500Principal instead? |
| assertEquals(cert.getIssuerDN(), principals[0]); |
| } |
| |
| private void clearClientCertPreferences() { |
| final AtomicBoolean cleared = new AtomicBoolean(false); |
| WebView.clearClientCertPreferences(new Runnable() { |
| @Override |
| public void run() { |
| cleared.set(true); |
| } |
| }); |
| // Wait until clearclientcertpreferences clears the preferences. Generally this is just a |
| // thread hopping. |
| new PollingCheck(WebkitUtils.TEST_TIMEOUT_MS) { |
| @Override |
| protected boolean check() { |
| return cleared.get(); |
| } |
| }.run(); |
| } |
| |
| // Note that this class is not thread-safe. |
| static class SslErrorWebViewClient extends WaitForLoadedClient { |
| private boolean mWasOnReceivedSslErrorCalled; |
| private String mErrorUrl; |
| private int mErrorCode; |
| |
| public SslErrorWebViewClient(WebViewOnUiThread onUiThread) { |
| super(onUiThread); |
| } |
| @Override |
| public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { |
| mWasOnReceivedSslErrorCalled = true; |
| mErrorUrl = error.getUrl(); |
| handler.proceed(); |
| } |
| @Override |
| public void onReceivedError(WebView view, int errorCode, String description, |
| String failingUrl) { |
| mErrorCode = errorCode; |
| } |
| @CallSuper |
| public void resetCallCounts() { |
| mWasOnReceivedSslErrorCalled = false; |
| mErrorUrl = null; |
| mErrorCode = 0; |
| } |
| public boolean wasOnReceivedSslErrorCalled() { |
| return mWasOnReceivedSslErrorCalled; |
| } |
| public String errorUrl() { |
| return mErrorUrl; |
| } |
| public int onReceivedErrorCode() { |
| return mErrorCode; |
| } |
| } |
| |
| // Modifies the default behavior of SslErrorWebViewClient to accept the request, and provide |
| // certs. |
| static class ClientCertWebViewClient extends SslErrorWebViewClient { |
| // User Actions |
| public static final int PROCEED = 1; |
| public static final int CANCEL = 2; |
| public static final int IGNORE = 3; |
| |
| private final boolean mKeyFromAndroidKeystore; |
| |
| private int mClientCertRequests; |
| private int mAction = PROCEED; |
| private Principal[] mPrincipals; |
| |
| public ClientCertWebViewClient(WebViewOnUiThread onUiThread) { |
| this(onUiThread, false); |
| } |
| |
| public ClientCertWebViewClient(WebViewOnUiThread onUiThread, |
| boolean keyFromAndroidKeystore) { |
| super(onUiThread); |
| mKeyFromAndroidKeystore = keyFromAndroidKeystore; |
| } |
| |
| public int getClientCertRequestCount() { |
| return mClientCertRequests; |
| } |
| |
| public Principal[] getPrincipals() { |
| return mPrincipals; |
| } |
| |
| public void setAction(int action) { |
| mAction = action; |
| } |
| |
| @Override |
| public void resetCallCounts() { |
| super.resetCallCounts(); |
| mClientCertRequests = 0; |
| mPrincipals = null; |
| } |
| |
| @Override |
| public void onReceivedClientCertRequest(WebView view, ClientCertRequest request) { |
| mClientCertRequests++; |
| mPrincipals = request.getPrincipals(); |
| if (mAction == IGNORE) { |
| request.ignore(); |
| return; |
| } |
| if (mAction == CANCEL) { |
| request.cancel(); |
| return; |
| } |
| if (mAction == PROCEED) { |
| try { |
| CertificateFactory certFactory = CertificateFactory.getInstance("X.509"); |
| X509Certificate[] certChain = new X509Certificate[] { |
| (X509Certificate) certFactory.generateCertificate( |
| new ByteArrayInputStream(FAKE_RSA_USER_1)), |
| (X509Certificate) certFactory.generateCertificate( |
| new ByteArrayInputStream(FAKE_RSA_CA_1)) |
| }; |
| KeyFactory keyFactory = KeyFactory.getInstance("RSA"); |
| PrivateKey key = keyFactory.generatePrivate( |
| new PKCS8EncodedKeySpec(FAKE_RSA_KEY_1)); |
| |
| if (mKeyFromAndroidKeystore) { |
| // Key needs to be backed by Android Keystore -- import it there. |
| KeyStore keyStore = KeyStore.getInstance("AndroidKeyStore"); |
| keyStore.load(null); |
| Log.d(LOGTAG, "Importing private key into Android Keystore..."); |
| keyStore.setEntry( |
| "fake1", |
| new KeyStore.PrivateKeyEntry(key, certChain), |
| null); |
| |
| key = (PrivateKey) keyStore.getKey("fake1", null); |
| Log.i(LOGTAG, "Imported private key into Android Keystore. key: " + key); |
| } |
| |
| request.proceed(key, certChain); |
| return; |
| } catch (Exception e) { |
| throw new RuntimeException(e); |
| } |
| } |
| throw new IllegalStateException("unknown action"); |
| } |
| } |
| } |
