/*
    * Copyright (c) 2002-2025 Gargoyle Software Inc.
    *
    * Licensed under the Apache License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    * https://www.apache.org/licenses/LICENSE-2.0
    *
    * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.htmlunit;
  
  import static org.eclipse.jetty.http.HttpVersion.HTTP_1_1;
  
  import java.net.URL;
  
  import javax.net.ssl.SSLHandshakeException;
  
  import org.eclipse.jetty.server.SslConnectionFactory;
  import org.eclipse.jetty.util.ssl.SslContextFactory;
  import org.eclipse.jetty.util.ssl.SslContextFactory.Server;
  import org.junit.jupiter.api.Assertions;
  import org.junit.jupiter.api.Test;
  
  /**
   * Tests for custom trust store.
   *
   * @author Carsten Steul
   * @author Ahmed Ashour
   * @author Ronald Brill
   */
  public class HttpWebConnectionTruststoreTest extends WebServerTestCase {
  
      /**
       * @throws Exception if an error occurs
       */
      @Test
      public void selfSignedCertInTruststore() throws Exception {
          final WebClient webClient = getWebClient();
          webClient.getOptions().setSSLTrustStore(
                  getClass().getClassLoader().getResource("self-signed-cert.keystore"),
                  "nopassword", "jks");
  
          final URL https = new URL("https://localhost:" + PORT2 + "/");
          loadPage("<div>test</div>", https);
      }
  
      /**
       * @throws Exception if an error occurs
       */
      @Test
      public void selfSignedCertNotInTruststore() throws Exception {
          final URL https = new URL("https://localhost:" + PORT2 + "/");
  
          Assertions.assertThrows(SSLHandshakeException.class,
                      () -> loadPage("<div>test</div>", https));
      }
  
      @Override
      protected boolean isHttps() {
          return true;
      }
  
      @Override
      public SslConnectionFactory getSslConnectionFactory() {
          final URL url = HttpWebConnectionInsecureSSLWithClientCertificateTest.class
                  .getClassLoader().getResource("self-signed-cert.keystore");
  
          final SslContextFactory contextFactory = new Server.Server();
          contextFactory.setKeyStoreType("jks");
          contextFactory.setKeyStorePath(url.toExternalForm());
          contextFactory.setKeyStorePassword("nopassword");
          return new SslConnectionFactory(contextFactory, HTTP_1_1.toString());
      }
  }