/* * Copyright (c) 2025, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ /* * @test * @bug 8354469 * @summary keytool password does not echo in multiple cases * @library /java/awt/regtesthelpers * @modules java.base/jdk.internal.util * @build PassFailJFrame * @run main/manual/othervm EchoPassword */ import jdk.internal.util.OperatingSystem; import javax.swing.JEditorPane; import javax.swing.JLabel; import javax.swing.event.HyperlinkEvent; import java.awt.Toolkit; import java.awt.datatransfer.StringSelection; import java.io.File; import java.nio.file.Path; public class EchoPassword { static JLabel label; public static void main(String[] args) throws Exception { var ks1 = "\"" + Path.of("8354469.ks1").toAbsolutePath() + "\""; var ks2 = "\"" + Path.of("8354469.ks2").toAbsolutePath() + "\""; var ks3 = "\"" + Path.of("8354469.ks3").toAbsolutePath() + "\""; final String keytool = "\"" + System.getProperty("java.home") + File.separator + "bin" + File.separator + "keytool\""; final String nonASCII = "äöäöäöäö"; final String[][] commands = { // Input password from real Console {"First command", keytool + " -keystore " + ks1 + " -genkeypair -keyalg ec -dname cn=a -alias first"}, // Input password from limited Console (when stdout is redirected) {"Second command", keytool + " -keystore " + ks2 + " -genkeypair -keyalg ec -dname cn=b -alias second | sort"}, // Input password from System.in stream {"Third command", "echo changeit| " + keytool + " -keystore " + ks1 + " -genkeypair -keyalg ec -dname cn=c -alias third"}, // Ensure limited Console does not write a newline to System.out {"Fourth command", keytool + " -keystore " + ks1 + " -exportcert -alias first | " + keytool + " -printcert -rfc"}, // Non-ASCII password from System.in {"Fifth command", "(" // Solution 2 of https://stackoverflow.com/a/29747723 + (OperatingSystem.isWindows() ? ("echo " + nonASCII + "^&echo " + nonASCII + "^&rem.") : ("echo " + nonASCII + "; echo " + nonASCII)) + ") | " + keytool + " -keystore " + ks3 + " -genkeypair -alias a -keyalg ec -dname cn=a"}, // Non-ASCII password from Console {"Sixth command", keytool + " -keystore " + ks3 + " -exportcert -alias a -rfc"}, {"The password", nonASCII} }; final String message = String.format(""" Open a terminal or Windows Command Prompt window, perform the following steps, and record the final result. Each time you click a link to copy something, make sure the status line at the bottom shows the link has been successfully clicked.

Part I: Password Echoing Tests

  1. Click Copy First Command to copy the following command into the system clipboard. Paste it into the terminal window and execute the command.

    %s

    When prompted, enter "changeit" and press Enter. When prompted again, enter "changeit" again and press Enter. Verify that the two password prompts show up on different lines, both passwords are hidden, and a key pair is generated successfully.

  2. Click Copy Second Command to copy the following command into the system clipboard. Paste it into the terminal window and execute the command.

    %s

    When prompted, enter "changeit" and press Enter. When prompted again, enter "changeit" again and press Enter. Verify that the two password prompts show up on different lines, both passwords are hidden, and a key pair is generated successfully.

  3. Click Copy Third Command to copy the following command into the system clipboard. Paste it into the terminal window and execute the command.

    %s

    You will see a prompt but you don't need to enter anything. Verify that the password "changeit" is not shown in the command output and a key pair is generated successfully.

  4. Click Copy Fourth Command to copy the following command into the system clipboard. Paste it into the terminal window and execute the command.

    %s

    When prompted, enter "changeit" and press Enter. Verify that the password is hidden and a PEM certificate is correctly shown.

Part II: Interoperability on Non-ASCII Passwords

  1. Click Copy Fifth Command to copy the following command into the system clipboard. Paste it into the terminal window and execute the command.

    %s

    Verify that a key pair is generated successfully.

  2. Click Copy Sixth Command to copy the following command into the system clipboard. Paste it into the terminal window and execute the command.

    %s

    When prompted, click Copy Password to copy the password. Paste it into the terminal window and press Enter. Verify that the password is hidden and a PEM certificate is correctly shown.

Press "pass" if the behavior matches expectations; otherwise, press "fail". """, commands[0][1], commands[1][1], commands[2][1], commands[3][1], commands[4][1], commands[5][1], commands[6][1]); PassFailJFrame.builder() .instructions(message) .rows(40).columns(100) .hyperlinkListener(e -> { if (e.getEventType() == HyperlinkEvent.EventType.ACTIVATED) { int pos = Integer.parseInt(e.getDescription().substring(1)); Toolkit.getDefaultToolkit().getSystemClipboard().setContents( new StringSelection(commands[pos][1]), null); label.setText(commands[pos][0] + " copied"); if (e.getSource() instanceof JEditorPane ep) { ep.getCaret().setVisible(false); } } }) .splitUIBottom(() -> { label = new JLabel("Status"); return label; }) .build() .awaitAndCheck(); } }