Reading a .der (file generated by openssl rsageberate command) file from classpath

[Juhi Bhatia]

Hi,

I need to read the private key from the .der file generated by openssl rsagen command. I am reading the file in the junit test case using the following piece of code, but the assertnotnull(privateKey ) is returning null, that means the private key is not read from the file. Need urgent help.

/**
 * 
 */
package com.entrib.emg.server.controller;

import java.io.FileInputStream;
import java.io.InputStream;
import java.security.KeyFactory;
import java.security.PrivateKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.util.List;

import junit.framework.Test;
import junit.framework.TestCase;
import junit.framework.TestSuite;

import org.apache.log4j.Logger;
import org.hibernate.Query;
import org.hibernate.Session;
import org.hibernate.SessionFactory;
import org.hibernate.Transaction;
import org.hibernate.cfg.AnnotationConfiguration;
import org.hibernate.cfg.Environment;
import org.hibernate.dialect.HSQLDialect;

import com.entrib.emg.common.encryption.EncryptUtils;
import com.entrib.emg.server.db.EMGUser;

/**
 * JUnit Test Cases for LoginController class
 * @author Juhi Bhatia
 **/
public class LoginControllerTest extends TestCase {
	
	private static Logger logger = Logger.getLogger(LoginControllerTest.class);
	private PrivateKey privateKey;
	SessionFactory sessionFactory;
	
	public static Test Suite() {
		return new TestSuite(LoginControllerTest.class);
	}
	
	protected void setUp() throws Exception {
		AnnotationConfiguration configuration = new AnnotationConfiguration();
		configuration.setProperty(Environment.DRIVER, "org.hsqldb.jdbcDriver");
		configuration.setProperty(Environment.URL, "jdbc:hsqldb:mem:LoginControllerTest");
		configuration.setProperty(Environment.USER, "sa");
		configuration.setProperty(Environment.DIALECT, HSQLDialect.class.getName());
		configuration.setProperty(Environment.HBM2DDL_AUTO, "create-drop");
		
		configuration.addAnnotatedClass(EMGUser.class);
		
		sessionFactory = configuration.buildSessionFactory();
		
		try {
		        InputStream privateKeyFile = this.getClass().getClassLoader().getResourceAsStream("key.der");
			byte[] encodedKey = new byte[privateKeyFile.available()];
			privateKeyFile.read(encodedKey);
			
			PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(encodedKey);
			KeyFactory keyFactory = KeyFactory.getInstance("RSA");
			privateKey = keyFactory.generatePrivate(keySpec);
		} catch (Exception e) {
			logger.error(e.getMessage());
		}
	}
	
	/**
	 * Unit Test for handleClientrequest
	 **/
	public void testHandleClientRequest() {
		assertNotNull(privateKey);
		
		Session hibernateSession = sessionFactory.openSession();
		Transaction tx = hibernateSession.beginTransaction();
		try {
			String data = "atuld";
			
			byte[] dataBytes = data.getBytes();
			byte[] encryptedData = EncryptUtils.rsaEncrypt(privateKey, dataBytes);
			byte[] decryptedData = EncryptUtils.rsaDecrypt(privateKey, encryptedData);
			String decryptedString = new String(decryptedData);
			assertEquals(data, decryptedString);
			
			tx.begin();
			String SQL_Query = "from EMGUser where username = '" + data + "'";
			Query query = hibernateSession.createQuery(SQL_Query);
			List list = query.list();
			EMGUser user = (EMGUser) list.get(0);
			assertEquals(data, user.getUsername());
		} catch (Exception e) {
			if (tx != null)
				tx.rollback();
			logger.error(e.getMessage());
		} finally {
			hibernateSession.flush();
			hibernateSession.close();
		}
	}
}

I have copied the der file in the same folder as this unit test case. Any help is appreciated.
Thanks,
Juhi.

[Greg Charles]

I think it's most likely that you're simply not finding the der file in the first place, so there's nothing to read. It's a bit tricky to get this right, but the idea is to give the name of a resource, and the system will look for it in the classpath. However, if you just provide a root level name like "key.der", it's just going to look in the root folder of each classpath entry. You've said that you put the file in the same directory as the unit test case ... and I assume you mean the class file. That means it's in the classpath, but buried in the package com.entrib.emg.server.controller. You either have to move key.der up to the root level, or change the resource name to com/entrib/emg/server/controller/key.der.

[Juhi Bhatia]

Hi Greg,
Thanks for your reply. I have already found a solution for it and its same as your suggestion. I just placed the key.der file under resources and could read it.

Thanks,
Juhi.