/*

* Copyright (c) 2008 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:

*

*/

package com.nokia.mj.impl.security.midp.common;

import com.nokia.mj.impl.installer.utils.InstallerMain;

import com.nokia.mj.impl.security.midp.common.SecurityAttributes;

import com.nokia.mj.impl.utils.exception.InvalidAttributeException;

import com.nokia.mj.impl.utils.InstallerErrorMessage;

import com.nokia.mj.impl.utils.InstallerDetailedErrorMessage;

import com.nokia.mj.impl.utils.ErrorMessageBase;

import com.nokia.mj.impl.utils.OtaStatusCode;

import com.nokia.mj.impl.utils.Attribute;

import java.util.Hashtable;

import j2meunit.framework.Test;

import j2meunit.framework.TestCase;

import j2meunit.framework.TestMethod;

import j2meunit.framework.TestSuite;

/**

 * SecurityDescriptorAttributes unit tests.

 */

public class SecurityDescriptorAttributesTests extends TestCase implements InstallerMain

{

    /**

     * Hashtable holding all the attributes. Tests populate this hashtable

     * prior to being executed

     */

    protected Hashtable allAttributes;

    // constants for permissions

    protected static final String MIDP2_SOCKET_PERMISSION = "javax.microedition.io.Connector.socket";

    protected static final String MIDP2_SERVER_SOCKET_PERMISSION = "javax.microedition.io.Connector.serversocket";

    protected static final String MIDP2_HTTP_PERMISSION = "javax.microedition.io.Connector.http";

    protected static final String MIDP2_HTTPS_PERMISSION = "javax.microedition.io.Connector.https";

    protected static final String MIDP2_SSL_PERMISSION = "javax.microedition.io.Connector.ssl";

    protected static final String MIDP2_DATAGRAM_PERMISSION = "javax.microedition.io.Connector.datagram";

    protected static final String MIDP2_DATAGRAM_RECEIVER_PERMISSION = "javax.microedition.io.Connector.datagramreceiver";

    protected static final String MIDP2_COMM_PERMISSION = "javax.microedition.io.Connector.comm";

    protected static final String MIDP2_PUSH_REGISTRY_PERMISSION = "javax.microedition.io.PushRegistry";

    private static final String INTERNAL_SOCKET_PERMISSION = "com.nokia.mj.impl.gcf.protocol.socket.SocketPermissionImpl";

    private static final String INTERNAL_HTTP_PERMISSION = "com.nokia.mj.impl.gcf.protocol.http.HttpPermissionImpl";

    private static final String INTERNAL_HTTPS_PERMISSION = "com.nokia.mj.impl.gcf.protocol.https.HttpsPermissionImpl";

    private static final String INTERNAL_SSL_PERMISSION = "com.nokia.mj.impl.gcf.protocol.ssl.SSLPermissionImpl";

    private static final String INTERNAL_DATAGRAM_PERMISSION = "com.nokia.mj.impl.gcf.protocol.datagram.DatagramPermissionImpl";

    private static final String INTERNAL_COMM_PERMISSION = "com.nokia.mj.impl.gcf.protocol.comm.CommPermissionImpl";

    private static final String INTERNAL_PUSH_REGISTRY_PERMISSION = "com.nokia.mj.impl.gcf.PushRegistryPermissionImpl";

    /**

     * Hashtable containing the mapping between MIDP3 permissions and their

     * default targets

     */

    private static Hashtable midp2PermissionTargets = new Hashtable();

    static

    {

        midp2PermissionTargets = new Hashtable();

        midp2PermissionTargets.put(INTERNAL_SOCKET_PERMISSION, "socket://*");

        midp2PermissionTargets.put(INTERNAL_HTTP_PERMISSION, "http://*");

        midp2PermissionTargets.put(INTERNAL_HTTPS_PERMISSION, "https://*");

        midp2PermissionTargets.put(INTERNAL_SSL_PERMISSION, "ssl://*");

        midp2PermissionTargets.put(INTERNAL_DATAGRAM_PERMISSION,"datagram://*");

        midp2PermissionTargets.put(INTERNAL_PUSH_REGISTRY_PERMISSION, "*");

    }

    // data being tested

    protected SecurityAttributes securityAttributes;

    private PermissionAttribute[] permissionAttributes;

    private AuthenticationAttribute[] authAttributes;

    // references to error messages

    protected InstallerErrorMessage errorMessage = new InstallerErrorMessage();

    protected InstallerDetailedErrorMessage detailedErrorMessage = new InstallerDetailedErrorMessage();

    // general-purpose constants

    protected static final String MIDP_PROFILE_ATTRIBUTE_NAME = "MicroEdition-Profile";

    protected static final String MIDP3 = "MIDP-3.0";

    protected static final String MIDP2 = "MIDP-2.0";

    private static final String COMMA = ",";

    // constants for the error messages to be displayed in case of failures

    protected String LEGACY_NOT_ALLOWED_MSG = "Placing a MIDP3 attribute in a MIDP2 descriptor threw InvalidAttributeException with following status code and message: ";

    protected String MIDP3_ATTRIBUTE_NOT_ALLOWED_MSG = "Placing a MIDP3 attribute in a MIDP2 descriptor threw InvalidAttributeException with following status code and message: ";

    protected String MIDP2_SIGNATURE_NOT_ALLOWED_MSG = "Placing a MIDP3 signature in a MIDP3 descriptor threw InvalidAttributeException with following status code and message: ";

    protected String UNKNOWN_PERMISSION_MSG = "Placing an unknown permission into descriptor threw InvalidAttributeException with following status code and message: ";

    protected String EMPTY_CERTIFICATE_MSG = "Certificate with empty value threw InvalidAttributeException with following status code and message: ";

    protected String INVALID_CERTIFICATE_MSG = "Certificate with invalid value threw InvalidAttributeException with following status code and message: ";

    protected String CERTIFICATE_WITHOUT_SIGNATURE_MSG = "Certificate without corresponding signature threw InvalidAttributeException with following status code and message: ";

    protected String INVALID_CERTIFICATE_SIGNATURE_MSG = "Certificate with invalid signature threw InvalidAttributeException with following status code and message: ";

    protected String INVALID_PERMISSION_VALUE_MSG = "Placing a permission attribute with invalid value threw InvalidAttributeException with following status code and message: ";

    protected String MISSING_CERTIFICATE_ATTRIBUTE_MSG = "Missing certificate attribute threw InvalidAttributeException with following status code and message: ";

    // Begin j2meunit test framework setup

    public void installerMain(String[] args)

    {

        TestSuite suite = new TestSuite(this.getClass().getName());

        suite.addTest(new SecurityDescriptorAttributesTests("testAuthenticationAttributes", new TestMethod()

        {

            public void run(TestCase tc)

            {

                ((SecurityDescriptorAttributesTests)tc).testAuthenticationAttributes();

            }

        }));

        suite.addTest(new SecurityDescriptorAttributesTests("testPermissionAttributes", new TestMethod()

        {

            public void run(TestCase tc)

            {

                ((SecurityDescriptorAttributesTests)tc).testPermissionAttributes();

            }

        }));

        com.nokia.mj.impl.utils.OmjTestRunner.run(suite);

    }

    public SecurityDescriptorAttributesTests()

    {

    }

    public SecurityDescriptorAttributesTests(String aTestName, TestMethod aTestMethod)

    {

        super(aTestName, aTestMethod);

    }

    public void assertFalse(String aMsg, boolean aCondition)

    {

        assertTrue(aMsg, !aCondition);

    }

    // End j2meunit test framework setup

    protected void setUp()

    {

        allAttributes = new Hashtable();

        securityAttributes = new SecurityAttributes();

    }

    protected void tearDown()

    {

    }

    // tests for chain and signature attributes

    protected void testAuthenticationAttributes()

    {

        // no attributes

        allAttributes.clear();

        authAttributes = securityAttributes.getAuthenticationAttributes();

        // empty certificate attribute

        try

        {

            allAttributes.clear();

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("", ""));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1"})));

        }

        // invalid certificate attribute

        try

        {

            allAttributes.clear();

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","?%cert"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1"})));

        }

        // missing signature attribute

        allAttributes.clear();

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        // missing certificate attribute

        try

        {

            allAttributes.clear();

            allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_MISSING,

                                                        new String[] {AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1"})));

        }

        // invalid signature attribute value

        try

        {

            allAttributes.clear();

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

            allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","?signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME})));

        }

        // invalid signature attribute

        try

        {

            allAttributes.clear();

            allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1", new Attribute("","?signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1"})));

        }

        // missing signature

        try

        {

            allAttributes.clear();

            allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "2", new Attribute("","signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_MISSING,

                                                        new String[] {AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1"})));

        }

        // MIDP3 signature attribute in a MIDP2 descriptor

        try

        {

            allAttributes.clear();

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1", new Attribute("","signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.INVALID_DESCRIPTOR

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1"})));

        }

        // MIDP2 signature in MIDP3 descriptor is illegal

        try

        {

            allAttributes.clear();

            allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

            allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.INVALID_DESCRIPTOR

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME})));

        }

        // MIDP2 signature in MIDP3 descriptor is illegal, even though there are sufficient MIDP3 signatures

        try

        {

            // MIDP2 signature is ignored, but this case succeeds since the MIDP3 signature is present

            allAttributes.clear();

            allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert"));

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1", new Attribute("","signature"));

            allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.INVALID_DESCRIPTOR

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME})));

        }

        // one certificate chain with 2 certificates and signature

        allAttributes.clear();

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert1"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert2"));

        allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

                   && authAttributes.length == 1

                   && checkChainsAndSignatures(authAttributes,

                                               new String[] {"cert1", "cert2"},

                                               new String[] {"signature"}));

        // 2 identical certificate chains and 1 signature -> only one chain and signature returned (duplicates ignored)

        allAttributes.clear();

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert1"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert2"));

        allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1", new Attribute("","cert1"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2", new Attribute("","cert2"));

        allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

                   && authAttributes.length == 1

                   && checkChainsAndSignatures(authAttributes,

                                               new String[] {"cert1", "cert2"},

                                               new String[] {"signature"}));

        // 2 identical certificate chains and 2 signatures -> only one chain and signature returned (duplicates ignored)

        allAttributes.clear();

        allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert1"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert2"));

        allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1", new Attribute("","signature"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1", new Attribute("","cert1"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2", new Attribute("","cert2"));

        allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "2", new Attribute("","signature"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

                   && authAttributes.length == 1

                   && checkChainsAndSignatures(authAttributes,

                                               new String[] {"cert1", "cert2"},

                                               new String[] {"signature"}));

        // one certificate chain with 2 certificates and signature

        allAttributes.clear();

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert1"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert2"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-4", new Attribute("","cert4"));

        allAttributes.put(AuthenticationAttribute.SECOND_LEGACY_ATTRIBUTE_NAME, new Attribute("","signature"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

                   && authAttributes.length == 1

                   && checkChainsAndSignatures(authAttributes,

                                               new String[] {"cert1", "cert2"},

                                               new String[] {"signature"}));

        // two certificate chains with missing one signature -> pick up the valid certificate and ignore the invalid one

        allAttributes.clear();

        allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1", new Attribute("","cert21"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2", new Attribute("","cert22"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert11"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert12"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-4", new Attribute("","cert14"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "4-1", new Attribute("","cert41"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "4-2", new Attribute("","cert42"));

        allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1" , new Attribute("","signature1"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

                   && authAttributes.length == 1

                   && checkChainsAndSignatures(authAttributes,

                                               new String[] {"cert11", "cert12"},

                                               new String[] {"signature1"}));

        // two invalid certificate chains: first one with missing signature, the second one invalid certificate -> signal the invalid certificate

        try

        {

            allAttributes.clear();

            allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1", new Attribute("","cert21"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2", new Attribute("","*cert22"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert11"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert12"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-4", new Attribute("","cert14"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "4-1", new Attribute("","cert41"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "4-2", new Attribute("","cert42"));

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "2" , new Attribute("","signature2"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2"})));

        }

        // two invalid certificate chains: first one with invalid certificate, the second one with missing signature -> signal the invalid certificate

        try

        {

            allAttributes.clear();

            allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1", new Attribute("","cert21"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2", new Attribute("","cert22"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert11"));

            allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","*cert12"));

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1" , new Attribute("","signature1"));

            securityAttributes = new SecurityAttributes();

            securityAttributes.addDescriptorAttributes(allAttributes);

        }

        catch (InvalidAttributeException e)

        {

                       e.getOtaStatusCode() == OtaStatusCode.APPLICATION_AUTHENTICATION_FAILURE

                       && e.getShortMessage().equals(errorMessage.get(InstallerErrorMessage.INST_CORRUPT_PKG, null))

                       && e.getDetailedMessage().equals(detailedErrorMessage.get(InstallerDetailedErrorMessage.ATTR_HANDLING_FAILED,

                                                        new String[] {AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2"})));

        }

        // two certificate chains with two signatures

        allAttributes.clear();

        allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-1", new Attribute("","cert21"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-2", new Attribute("","cert22"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "2-3", new Attribute("","cert23"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-1", new Attribute("","cert11"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-2", new Attribute("","cert12"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "1-4", new Attribute("","cert14"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "4-1", new Attribute("","cert41"));

        allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + "4-2", new Attribute("","cert42"));

        allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "1" , new Attribute("","signature1"));

        allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "2" , new Attribute("","signature2"));

        allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + "5" , new Attribute("","signature5"));

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

                   && authAttributes.length == 2

                   && checkChainsAndSignatures(authAttributes,

                                               new String[] {"cert11", "cert12", "cert21", "cert22", "cert23"},

                                               new String[] {"signature1", "signature2"}));

        // 100 certificate chains (10 certificates each) with 100 signatures

        allAttributes.clear();

        allAttributes.put(MIDP_PROFILE_ATTRIBUTE_NAME,new Attribute("",MIDP3));

        for (int i=1; i<=100; i++)

        {

            for (int j=1; j<=10; j++)

            {

                allAttributes.put(AuthenticationAttribute.MAIN_ATTRIBUTE_PREFIX + i + "-" + j, new Attribute("","cert"+ i + "" + j));

            }

            allAttributes.put(AuthenticationAttribute.SECOND_ATTRIBUTE_PREFIX + i , new Attribute("","signature" + i));

        }

        securityAttributes = new SecurityAttributes();

        securityAttributes.addDescriptorAttributes(allAttributes);

        authAttributes = securityAttributes.getAuthenticationAttributes();

        for (int i=0; i<100; i++)

        {

            // make sure we have 10 certs in each chain and a corresponding signature

                       && authAttributes[i].getSignature() != null

                       && authAttributes[i].getCertChain().length == 10

                       && authAttributes[i].getSignature().equals("signature" + (i+1)));

            // check each chain

            for (int j=0; j<10; j++)

            {

                           .equals("cert" + (i+1) + "" + (j+1)));

            }

        }

    }

    // tests for permission attributes

    protected void testPermissionAttributes()

    {