Java自签名证书和密钥库的使用
我需要创建公钥和私钥以及公共证书。我能够使用以下代码生成自签名证书Java自签名证书和密钥库的使用,java,x509certificate,keystore,pki,Java,X509certificate,Keystore,Pki,我需要创建公钥和私钥以及公共证书。我能够使用以下代码生成自签名证书 KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA"); keyPairGenerator.initialize(1024); KeyPair KPair = keyPairGenerator.generateKeyPair(); PrivateKey privkey = KPair.getPrivat
KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");
keyPairGenerator.initialize(1024);
KeyPair KPair = keyPairGenerator.generateKeyPair();
PrivateKey privkey = KPair.getPrivate();
X509CertInfo info = new X509CertInfo();
Date from = new Date();
Date to = new Date(from.getTime() + days * 86400000l);
CertificateValidity interval = new CertificateValidity(from, to);
BigInteger sn = new BigInteger(64, new SecureRandom());
X500Name owner = new X500Name(dn);
info.set(X509CertInfo.VALIDITY, interval);
info.set(X509CertInfo.SERIAL_NUMBER, new CertificateSerialNumber(sn));
info.set(X509CertInfo.SUBJECT, new CertificateSubjectName(owner));
info.set(X509CertInfo.ISSUER, new CertificateIssuerName(owner));
info.set(X509CertInfo.KEY, new CertificateX509Key(pair.getPublic()));
info.set(X509CertInfo.VERSION, new CertificateVersion(CertificateVersion.V3));
AlgorithmId algo = new AlgorithmId(AlgorithmId.md5WithRSAEncryption_oid);
info.set(X509CertInfo.ALGORITHM_ID, new CertificateAlgorithmId(algo));
// Sign the cert to identify the algorithm that's used.
X509CertImpl cert = new X509CertImpl(info);
cert.sign(privkey, algorithm);
// Update the algorith, and resign.
algo = (AlgorithmId)cert.get(X509CertImpl.SIG_ALG);
info.set(CertificateAlgorithmId.NAME + "." + CertificateAlgorithmId.ALGORITHM, algo);
cert = new X509CertImpl(info);
cert.sign(privkey, algorithm);
现在,我需要使用keystore或任何其他方式保存私钥和公钥,以便检索用于对任何文件或对象签名的私钥和公钥。我尝试使用简单的文件流,但它给了我错误,似乎这不是正确的方式。请指导我下一步该做什么。我想使用证书和私钥对一些数据进行签名,我想保存它们以便随时使用验证。我找到了答案
private void savePublicKeyToFile(String fileName,
BigInteger mod, BigInteger exp) throws IOException {
ObjectOutputStream oout = new ObjectOutputStream(
new BufferedOutputStream(new FileOutputStream(fileName)));
try {
oout.writeObject(mod);
oout.writeObject(exp);
} catch (Exception e) {
// throw new SomeException(e);
} finally {
oout.close();
}
}
private void savePrivteKeyToFile(String fileName,
BigInteger mod, BigInteger PublicExponent, BigInteger PrivateExponent,
BigInteger PrimeP, BigInteger PrimeQ,BigInteger PrimeExponentP,BigInteger PrimeExponentQ,
BigInteger CrtCoefficient) throws IOException {
ObjectOutputStream oout = new ObjectOutputStream(
new BufferedOutputStream(new FileOutputStream(fileName)));
try {
oout.writeObject(mod);
oout.writeObject(PublicExponent);
oout.writeObject(PrivateExponent);
oout.writeObject(PrimeP);
oout.writeObject(PrimeQ);
oout.writeObject(PrimeExponentP);
oout.writeObject(PrimeExponentQ);
oout.writeObject(CrtCoefficient);
} catch (Exception e) {
// throw new SomeException(e);
} finally {
oout.close();
}
}
// To save in keystore here is the way
Certificate [] certChain = new Certificate[1];
certChain[0] = ca;
String strAlias = "abcalias", strPassword="mypass";
KeyStore keyStore = KeyStore.getInstance("jks");
keyStore.load(null,strPassword.toCharArray());
keyStore.setEntry(strAlias,
new KeyStore.PrivateKeyEntry((PrivateKey) KPair.getPrivate(), certChain),
new KeyStore.PasswordProtection(strPassword.toCharArray()));
FileOutputStream fkey = new FileOutputStream(strFilePath+".keystore");
keyStore.store(fkey, strPassword.toCharArray());
fkey.close();