2013-03-11 122 views
1

我需要在公共證書上創建公鑰和私鑰。我可以使用下面的代碼來生成自我標誌證書...Java自簽名證書和密鑰庫使用

KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA"); 
    keyPairGenerator.initialize(1024); 
    KeyPair KPair = keyPairGenerator.generateKeyPair(); 
    PrivateKey privkey = KPair.getPrivate(); 

    X509CertInfo info = new X509CertInfo(); 
    Date from = new Date(); 
    Date to = new Date(from.getTime() + days * 86400000l); 
    CertificateValidity interval = new CertificateValidity(from, to); 
    BigInteger sn = new BigInteger(64, new SecureRandom()); 
    X500Name owner = new X500Name(dn); 

    info.set(X509CertInfo.VALIDITY, interval); 
    info.set(X509CertInfo.SERIAL_NUMBER, new CertificateSerialNumber(sn)); 
    info.set(X509CertInfo.SUBJECT, new CertificateSubjectName(owner)); 
    info.set(X509CertInfo.ISSUER, new CertificateIssuerName(owner)); 
    info.set(X509CertInfo.KEY, new CertificateX509Key(pair.getPublic())); 
    info.set(X509CertInfo.VERSION, new CertificateVersion(CertificateVersion.V3)); 
    AlgorithmId algo = new AlgorithmId(AlgorithmId.md5WithRSAEncryption_oid); 
    info.set(X509CertInfo.ALGORITHM_ID, new CertificateAlgorithmId(algo)); 

    // Sign the cert to identify the algorithm that's used. 
    X509CertImpl cert = new X509CertImpl(info); 
    cert.sign(privkey, algorithm); 

    // Update the algorith, and resign. 
    algo = (AlgorithmId)cert.get(X509CertImpl.SIG_ALG); 
    info.set(CertificateAlgorithmId.NAME + "." + CertificateAlgorithmId.ALGORITHM, algo); 
    cert = new X509CertImpl(info); 
    cert.sign(privkey, algorithm); 

現在我需要通過使用密鑰庫或任何otherway保存私鑰和公鑰要麼讓我可以檢索那些簽署任何文件或對象。我試圖使用簡單的文件流,但它給了我錯誤,似乎它不是正確的方式。請引導我下一步該做什麼。我想使用證書和私鑰簽署一些數據,我想保存它們以便隨時可以使用驗證。

回答

0

我找到了答案

private void savePublicKeyToFile(String fileName, 
           BigInteger mod, BigInteger exp) throws IOException { 
    ObjectOutputStream oout = new ObjectOutputStream(
      new BufferedOutputStream(new FileOutputStream(fileName))); 
    try { 
     oout.writeObject(mod); 
     oout.writeObject(exp); 
    } catch (Exception e) { 
     // throw new SomeException(e); 
    } finally { 
     oout.close(); 
    } 
} 

    private void savePrivteKeyToFile(String fileName, 
           BigInteger mod, BigInteger PublicExponent, BigInteger PrivateExponent, 
      BigInteger PrimeP, BigInteger PrimeQ,BigInteger PrimeExponentP,BigInteger PrimeExponentQ, 
      BigInteger CrtCoefficient) throws IOException { 
    ObjectOutputStream oout = new ObjectOutputStream(
      new BufferedOutputStream(new FileOutputStream(fileName))); 
    try { 
     oout.writeObject(mod); 
     oout.writeObject(PublicExponent); 
     oout.writeObject(PrivateExponent); 
     oout.writeObject(PrimeP); 
     oout.writeObject(PrimeQ); 
     oout.writeObject(PrimeExponentP); 
     oout.writeObject(PrimeExponentQ); 
     oout.writeObject(CrtCoefficient); 
    } catch (Exception e) { 
     // throw new SomeException(e); 
    } finally { 
     oout.close(); 
    } 
} 


    // To save in keystore here is the way 


    Certificate [] certChain = new Certificate[1]; 
    certChain[0] = ca; 
    String strAlias = "abcalias", strPassword="mypass"; 
    KeyStore keyStore = KeyStore.getInstance("jks"); 
    keyStore.load(null,strPassword.toCharArray()); 
    keyStore.setEntry(strAlias, 
     new KeyStore.PrivateKeyEntry((PrivateKey) KPair.getPrivate(), certChain), 
     new KeyStore.PasswordProtection(strPassword.toCharArray())); 

    FileOutputStream fkey = new FileOutputStream(strFilePath+".keystore"); 
    keyStore.store(fkey, strPassword.toCharArray()); 
    fkey.close();