groovy-core/src/test/groovy/security/SignedJarTest.java

package groovy.security;

import junit.framework.Test;
import junit.framework.TestSuite;
import junit.textui.TestRunner;


/**
 * Read a .groovy file from a signed jar and verify that a policy file grant with a signedBy field
 * works.  The following steps were used to create and manage the keys used to sign and read the jar:
 * <ol>
 * <li>keytool -genkey -alias groovy -keypass keypass -keystore groovystore -storepass storepass -validity 7000
 * <li>keytool -export -keystore groovystore -alias groovy -file GroovyDev.cer
 * <li>keytool -import -alias groovy -file GroovyDev.cer -keystore groovykeys
 * </ol>
 * Once the keys are constructed, creat the jar and sign:
 * <ol>
 * <li>jar -cvf Groovy.jar groovy
 * <li>jarsigner -keystore groovystore -signedjar GroovyJarTest.jar Groovy.jar groovy
 * </ol>
 * Add the keystore to the policy file and write the grant:
 * <ol>
 * <li>keystore "file:${user.dir}/src/test/groovy/security/groovykeys";
 * </ol>
 */
public class SignedJarTest extends SecurityTestSupport {

    public static void main(String[] args) {
        TestRunner.run(suite());
    }

    public static Test suite() {
        return new TestSuite(SignedJarTest.class);
    }

    public void testReadSignedJar() throws Exception {
        if (!isSecurityAvailable() || (notYetImplemented())) return;

        //spg 2006-02-09 The GroovyClassLoader code that checked jar files
        //for source files was removed last July.  This test will not function
        //without that capability.
        Class c = loader.loadClass("groovy.security.JarTest");  // ClassNotFoundException !
        executeTest(c, null);

    }
}