diff --git a/repo/repo-test-util/src/main/java/com/evolveum/midpoint/test/AbstractIntegrationTest.java b/repo/repo-test-util/src/main/java/com/evolveum/midpoint/test/AbstractIntegrationTest.java index 64c6de450ec..83540936e25 100644 --- a/repo/repo-test-util/src/main/java/com/evolveum/midpoint/test/AbstractIntegrationTest.java +++ b/repo/repo-test-util/src/main/java/com/evolveum/midpoint/test/AbstractIntegrationTest.java @@ -99,11 +99,18 @@ import org.testng.AssertJUnit; import org.testng.annotations.BeforeMethod; +import javax.net.ssl.TrustManager; +import javax.net.ssl.TrustManagerFactory; +import javax.net.ssl.X509TrustManager; import javax.xml.bind.JAXBException; import javax.xml.namespace.QName; import java.io.File; import java.io.IOException; +import java.security.KeyStore; +import java.security.KeyStoreException; +import java.security.NoSuchAlgorithmException; +import java.security.cert.X509Certificate; import java.util.ArrayList; import java.util.Arrays; import java.util.Collection; @@ -1322,4 +1329,23 @@ protected String getPasswordHistoryHumanReadable(List }) .collect(Collectors.joining(", ")); } + + protected void logTrustManagers() throws NoSuchAlgorithmException, KeyStoreException { + TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm()); + trustManagerFactory.init((KeyStore)null); + for (TrustManager trustManager : trustManagerFactory.getTrustManagers()) { + if (trustManager instanceof X509TrustManager) { + X509TrustManager x509TrustManager = (X509TrustManager)trustManager; + LOGGER.debug("TrustManager(X509): {}", x509TrustManager); + X509Certificate[] acceptedIssuers = x509TrustManager.getAcceptedIssuers(); + if (acceptedIssuers != null) { + for (X509Certificate acceptedIssuer: acceptedIssuers) { + LOGGER.debug(" acceptedIssuer: {}", acceptedIssuer); + } + } + } else { + LOGGER.debug("TrustManager: {}", trustManager); + } + } + } } diff --git a/testing/conntest/src/test/java/com/evolveum/midpoint/testing/conntest/AbstractLdapTest.java b/testing/conntest/src/test/java/com/evolveum/midpoint/testing/conntest/AbstractLdapTest.java index 301dceeb436..6e8c435da91 100644 --- a/testing/conntest/src/test/java/com/evolveum/midpoint/testing/conntest/AbstractLdapTest.java +++ b/testing/conntest/src/test/java/com/evolveum/midpoint/testing/conntest/AbstractLdapTest.java @@ -361,6 +361,8 @@ public void initSystem(Task initTask, OperationResult initResult) throws Excepti ciMatchingRule = matchingRuleRegistry.getMatchingRule(StringIgnoreCaseMatchingRule.NAME, DOMUtil.XSD_STRING); dnMatchingRule = matchingRuleRegistry.getMatchingRule(DistinguishedNameMatchingRule.NAME, DOMUtil.XSD_STRING); + logTrustManagers(); + if (isAssertOpenFiles()) { lsof = new Lsof(TestUtil.getPid()); } diff --git a/testing/conntest/src/test/resources/truststore.jks b/testing/conntest/src/test/resources/truststore.jks index 71354d3600e..e8c0711c898 100644 Binary files a/testing/conntest/src/test/resources/truststore.jks and b/testing/conntest/src/test/resources/truststore.jks differ