利用java代码生成keyStore

2023-11-21 06:50| 来源: 网络整理| 查看: 265

在前面的章节中介绍了如何利用KeyTool工具生成keyStore：传送门。

但是很多时候，在javaWeb项目中，比如给每个用户加上独特的数字签名，那么我们需要在创建用户的时候，给其生成独一无二的keystore。我现在主要的功能是，给每个用户下载pdf的时候加上数字签名。

下面说一下生成keystore的主要思想：借助keyTool中的生成keyStore的方法。主要利用sun.security.tools.keytool包文件来处理。

import java.io.FileOutputStream; import java.io.IOException; import java.security.GeneralSecurityException; import java.security.KeyStore; import java.security.KeyStoreException; import java.security.NoSuchAlgorithmException; import java.security.PrivateKey; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import java.util.Date; import sun.security.tools.keytool.CertAndKeyGen; import sun.security.x509.X500Name; /** * 主要用于创建keyStore文件，保存起来 * * @author Xia * */ public class KeyStoreCreate2 { public static String filePath = "src/main/resources/pdf0090createEncrypt/new_KeyStore.keystore"; private static final int keysize = 1024; private static final String commonName = "www.ctbri.com"; private static final String organizationalUnit = "IT"; private static final String organization = "test"; private static final String city = "beijing"; private static final String state = "beijing"; private static final String country = "beijing"; private static final long validity = 1096; // 3 years private static final String alias = "tomcat"; private static final char[] keyPassword = "123456".toCharArray(); public static void main(String[] args) throws GeneralSecurityException { try { KeyStore ks = KeyStore.getInstance("pkcs12"); // char[] password = "123456".toCharArray(); ks.load(null, null); CertAndKeyGen keypair = new CertAndKeyGen("RSA", "SHA1WithRSA", null); X500Name x500Name = new X500Name(commonName, organizationalUnit, organization, city, state, country); keypair.generate(keysize); PrivateKey privateKey = keypair.getPrivateKey(); X509Certificate[] chain = new X509Certificate[1]; chain[0] = keypair.getSelfCertificate(x500Name, new Date(), (long)validity*24*60*60); // store away the key store FileOutputStream fos = new FileOutputStream(filePath); ks.setKeyEntry(alias, privateKey, keyPassword, chain); ks.store(fos, keyPassword); fos.close(); System.out.println("create Success"); } catch (KeyStoreException e) { e.printStackTrace(); } catch (NoSuchAlgorithmException e) { e.printStackTrace(); } catch (CertificateException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } } }

【本文地址】

公司简介

联系我们