MSCabinetSignerTest with signtool

MSCabinetSignerTest.java

/**
 * Copyright 2012 Emmanuel Bourg
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package net.jsign;

import net.jsign.mscab.MSCabFile;
import org.apache.commons.compress.utils.SeekableInMemoryByteChannel;
import org.apache.commons.io.FileUtils;
import org.apache.commons.io.IOUtils;
import org.bouncycastle.asn1.cms.CMSAttributes;
import org.bouncycastle.cms.CMSSignedData;
import org.junit.Test;

import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.security.KeyStore;
import java.util.List;
import java.util.concurrent.TimeUnit;

import static org.junit.Assert.*;

public class MSCabinetSignerTest {

    private static String PRIVATE_KEY_PASSWORD = "password";
    private static String ALIAS = "test";

    private KeyStore getKeyStore() throws Exception {
        KeyStore keystore = KeyStore.getInstance("JKS");
        keystore.load(new FileInputStream("target/test-classes/keystores/keystore.jks"), "password".toCharArray());
        return keystore;
    }

    void testReal(File file) {
        try {
            Process process = Runtime.getRuntime().exec(new String[] {
                    "C:\\Program Files (x86)\\Windows Kits\\10\\bin\\10.0.17763.0\\x86\\signtool.exe",
                    "verify",
                    "/debug",
                    "/pa",
                    file.getAbsolutePath()
            });
            Thread t1 = new Thread(() -> {
                try {
                    IOUtils.copy(process.getErrorStream(), System.out);
                } catch (IOException e) {
                    e.printStackTrace();
                }
            });
            Thread t2 = new Thread(() -> {
                try {
                    IOUtils.copy(process.getInputStream(), System.out);
                } catch (IOException e) {
                    e.printStackTrace();
                }
            });
            t1.start();
            t2.start();
            process.waitFor(5, TimeUnit.SECONDS);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }

    @Test
    public void testSignSample1() throws Exception {
        File sourceFile = new File("target/test-classes/cabinet-sample-1/disk1/sample.cab");
        File targetFile = new File("target/test-classes/cabinet-sample-1-signed/disk1/sample.cab");

        targetFile.getParentFile().mkdirs();
        
        FileUtils.copyFile(sourceFile, targetFile);

        MSCabFile cabFile = new MSCabFile(targetFile);
        
        PESigner signer = new PESigner(getKeyStore(), ALIAS, PRIVATE_KEY_PASSWORD)
                .withTimestamping(false)
                .withProgramName("WinEyes")
                .withProgramURL("http://www.steelblue.com/WinEyes");
        
        signer.sign(cabFile);
        
        cabFile = new MSCabFile(targetFile);
        List<CMSSignedData> signatures = cabFile.getSignatures();
        assertNotNull(signatures);
        assertEquals(1, signatures.size());
        
        CMSSignedData signature = signatures.get(0);
        
        assertNotNull(signature);
        assertNull(signature.getSignerInfos().iterator().next().getSignedAttributes().get(CMSAttributes.signingTime));
        
        cabFile.printInfo(System.out);

        cabFile.close();
        testReal(targetFile);
    }

    @Test
    public void testSignSample2() throws Exception {
        File sourceFile = new File("target/test-classes/cabinet-sample-2/disk1/sample.cab");
        File targetFile = new File("target/test-classes/cabinet-sample-2-signed/disk1/sample.cab");

        targetFile.getParentFile().mkdirs();

        FileUtils.copyFile(sourceFile, targetFile);

        MSCabFile cabFile = new MSCabFile(targetFile);

        PESigner signer = new PESigner(getKeyStore(), ALIAS, PRIVATE_KEY_PASSWORD)
                .withTimestamping(false)
                .withProgramName("WinEyes")
                .withProgramURL("http://www.steelblue.com/WinEyes");

        signer.sign(cabFile);

        cabFile = new MSCabFile(targetFile);
        List<CMSSignedData> signatures = cabFile.getSignatures();
        assertNotNull(signatures);
        assertEquals(1, signatures.size());

        CMSSignedData signature = signatures.get(0);

        assertNotNull(signature);
        assertNull(signature.getSignerInfos().iterator().next().getSignedAttributes().get(CMSAttributes.signingTime));

        cabFile.printInfo(System.out);

        cabFile.close();
        testReal(targetFile);
    }

    @Test
    public void testSignTwice() throws Exception {
        File sourceFile = new File("target/test-classes/cabinet-sample-1/disk1/sample.cab");
        File targetFile = new File("target/test-classes/cabinet-sample-1-twice-signed/disk1/sample.cab");

        targetFile.getParentFile().mkdirs();

        FileUtils.copyFile(sourceFile, targetFile);

        MSCabFile file = new MSCabFile(targetFile);

        AuthenticodeSigner signer = new AuthenticodeSigner(getKeyStore(), ALIAS, PRIVATE_KEY_PASSWORD)
                .withDigestAlgorithm(DigestAlgorithm.SHA1)
                .withTimestamping(true)
                .withProgramName("Hello World")
                .withProgramURL("http://example.com");

        signer.sign(file);

        file = new MSCabFile(targetFile);

        List<CMSSignedData> signatures = file.getSignatures();
        assertNotNull(signatures);
        assertEquals("number of signatures", 1, signatures.size());

        assertNotNull(signatures.get(0));
        SignatureAssert.assertTimestamped("Invalid timestamp", signatures.get(0));

        // second signature
        signer.withDigestAlgorithm(DigestAlgorithm.SHA256);
        signer.withTimestamping(false);
        signer.sign(file);

        file = new MSCabFile(targetFile);
        signatures = file.getSignatures();
        file.close();
        assertNotNull(signatures);
        assertEquals("number of signatures", 2, signatures.size());

        assertNotNull(signatures.get(0));
        SignatureAssert.assertTimestamped("Timestamp corrupted after adding the second signature", signatures.get(0));

        testReal(targetFile);
    }

    @Test
    public void testSignThreeTimes() throws Exception {
        File sourceFile = new File("target/test-classes/cabinet-sample-1/disk1/sample.cab");
        File targetFile = new File("target/test-classes/cabinet-sample-1-three-times-signed/disk1/sample.cab");

        FileUtils.copyFile(sourceFile, targetFile);

        MSCabFile file = new MSCabFile(targetFile);

        AuthenticodeSigner signer = new AuthenticodeSigner(getKeyStore(), ALIAS, PRIVATE_KEY_PASSWORD)
                .withDigestAlgorithm(DigestAlgorithm.SHA1)
                .withTimestamping(true)
                .withProgramName("Hello World")
                .withProgramURL("http://example.com");

        signer.sign(file);

        file = new MSCabFile(targetFile);

        List<CMSSignedData> signatures = file.getSignatures();
        assertNotNull(signatures);
        assertEquals("number of signatures", 1, signatures.size());

        assertNotNull(signatures.get(0));
        SignatureAssert.assertTimestamped("Invalid timestamp", signatures.get(0));

        // second signature
        signer.withDigestAlgorithm(DigestAlgorithm.SHA256);
        signer.withTimestamping(false);
        signer.sign(file);

        file = new MSCabFile(targetFile);
        signatures = file.getSignatures();
        assertNotNull(signatures);
        assertEquals("number of signatures", 2, signatures.size());

        assertNotNull(signatures.get(0));
        SignatureAssert.assertTimestamped("Timestamp corrupted after adding the second signature", signatures.get(0));

        // third signature
        signer.withDigestAlgorithm(DigestAlgorithm.SHA512);
        signer.withTimestamping(false);
        signer.sign(file);

        file = new MSCabFile(targetFile);
        signatures = file.getSignatures();
        file.close();
        assertNotNull(signatures);
        assertEquals("number of signatures", 3, signatures.size());

        assertNotNull(signatures.get(0));
        SignatureAssert.assertTimestamped("Timestamp corrupted after adding the third signature", signatures.get(0));

        testReal(targetFile);
    }

    @Test
    public void testReplaceSignature() throws Exception {
        File sourceFile = new File("target/test-classes/cabinet-sample-1/disk1/sample.cab");
        File targetFile = new File("target/test-classes/cabinet-sample-1-replaced-signed/disk1/sample.cab");

        FileUtils.copyFile(sourceFile, targetFile);

        MSCabFile file = new MSCabFile(targetFile);

        AuthenticodeSigner signer = new AuthenticodeSigner(getKeyStore(), ALIAS, PRIVATE_KEY_PASSWORD)
                .withDigestAlgorithm(DigestAlgorithm.SHA1)
                .withProgramName("Minimal Package")
                .withProgramURL("http://example.com");

        signer.sign(file);

        file = new MSCabFile(targetFile);

        List<CMSSignedData> signatures = file.getSignatures();
        assertNotNull(signatures);
        assertEquals("number of signatures", 1, signatures.size());

        assertNotNull(signatures.get(0));

        // second signature
        signer.withDigestAlgorithm(DigestAlgorithm.SHA256);
        signer.withTimestamping(false);
        signer.withSignaturesReplaced(true);
        signer.sign(file);

        file = new MSCabFile(targetFile);
        signatures = file.getSignatures();
        file.close();
        assertNotNull(signatures);
        assertEquals("number of signatures", 1, signatures.size());

        assertNotNull(signatures.get(0));

        assertEquals("Digest algorithm", DigestAlgorithm.SHA256.oid, signatures.get(0).getDigestAlgorithmIDs().iterator().next().getAlgorithm());

        testReal(targetFile);
    }

    @Test
    public void testSignInMemory() throws Exception {
        File sourceFile = new File("target/test-classes/cabinet-sample-1/disk1/sample.cab");
        
        byte[] data = FileUtils.readFileToByteArray(sourceFile);

        SeekableInMemoryByteChannel channel = new SeekableInMemoryByteChannel(data);

        MSCabFile file = new MSCabFile(channel);

        AuthenticodeSigner signer = new AuthenticodeSigner(getKeyStore(), ALIAS, PRIVATE_KEY_PASSWORD)
                .withDigestAlgorithm(DigestAlgorithm.SHA512)
                .withProgramName("Minimal Package")
                .withProgramURL("http://example.com");

        signer.sign(file);

        data = channel.array();
        file = new MSCabFile(new SeekableInMemoryByteChannel(data));

        List<CMSSignedData> signatures = file.getSignatures();
        file.close();
        assertNotNull(signatures);
        assertEquals(1, signatures.size());

        CMSSignedData signature = signatures.get(0);

        assertNotNull(signature);
    }
}