如何以編程方式創建新的KeyStore？

Question

我試圖以編程方式在Java中創建一個新的密鑰庫。以下代碼：

KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); 
keyStore.setCertificateEntry("alias", cert); 

引發未初始化的KeyStore異常。

Answer 1

KeyStore需要在創建後加載。 load方法要求FileInputStream讀取，但如果您提供一個空值，則會加載一個空的KeyStore。

見this link

Answer 2

要在Java中創建一個新的密鑰庫，你首先需要創建密鑰庫文件，然後保存它使用store(FileOutputStream, char[])方法：

KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType()); 

char[] password = "some password".toCharArray(); 
ks.load(null, password); 

// Store away the keystore. 
FileOutputStream fos = new FileOutputStream("newKeyStoreFileName"); 
ks.store(fos, password); 
fos.close(); 

我希望這可以幫助，你可以看到更多info here。

Answer 3

public static void main(String[] args) { 
    // Load the JDK's cacerts keystore file 
    String filename = System.getProperty("java.home") + "/lib/security/cacerts".replace('/', File.separatorChar); 
    FileInputStream is = new FileInputStream(filename); 
    KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType()); 
    char[] password = "changeit".toCharArray(); 
    //keystore.load(is, password.toCharArray()); 
    keystore.load(is, password); 

    // This class retrieves the most-trusted CAs from the keystore 
    PKIXParameters params = new PKIXParameters(keystore); 
    // Get the set of trust anchors, which contain the most-trusted CA certificates 
    java.security.cert.Certificate sapcert = keystore.getCertificate("SAPNetCA"); 
    PublicKey sapcertKey = sapcert.getPublicKey(); 
    System.out.println(sapcertKey); 
    Enumeration<String> aliases = keystore.aliases(); 
    while (aliases.hasMoreElements()) { 
     String alias = aliases.nextElement(); 
     //System.out.println("alias certificates :"+alias); 
     if (keystore.isKeyEntry(alias)) { 
      keystore.getKey(alias, password); 
     } 
    } 

Answer 4

// load the keystore 
KeyStore p12 = KeyStore.getInstance("pkcs12"); 
p12.load(new FileInputStream("KEYSTORE.p12"), "passwd".toCharArray()); 

// load the private key entry from the keystore 
Key key = p12.getKey("mykey", "passwd".toCharArray()); 
PrivateKey privKey = (PrivateKey) key; 

Answer 5

我用這個代碼，它的工作原理，希望它能幫助。

public static KeyStore createKeyStore() throws Exception { 
    File file = new File("/Users/keyserverstore.keystore"); 
    KeyStore keyStore = KeyStore.getInstance("JKS"); 
    if (file.exists()) { 
     // if exists, load 
     keyStore.load(new FileInputStream(file), "123456".toCharArray()); 
    } else { 
     // if not exists, create 
     keyStore.load(null, null); 
     keyStore.store(new FileOutputStream(file), "123456".toCharArray()); 
    } 
    return keyStore; 
}