Java自簽名證書和密鑰庫用法

Question

我需要沿着公共證書創建公共和私有密鑰。 我可以使用以下代碼生成自簽名證書...

    KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");  
    keyPairGenerator.initialize(1024);  
    KeyPair KPair = keyPairGenerator.generateKeyPair(); 
   PrivateKey privkey = KPair.getPrivate();

  X509CertInfo info = new X509CertInfo();
  Date from = new Date();
  Date to = new Date(from.getTime() + days * 86400000l);
  CertificateValidity interval = new CertificateValidity(from, to);
  BigInteger sn = new BigInteger(64, new SecureRandom());
  X500Name owner = new X500Name(dn);

  info.set(X509CertInfo.VALIDITY, interval);
  info.set(X509CertInfo.SERIAL_NUMBER, new CertificateSerialNumber(sn));
  info.set(X509CertInfo.SUBJECT, new CertificateSubjectName(owner));
  info.set(X509CertInfo.ISSUER, new CertificateIssuerName(owner));
  info.set(X509CertInfo.KEY, new CertificateX509Key(pair.getPublic()));
  info.set(X509CertInfo.VERSION, new CertificateVersion(CertificateVersion.V3));
  AlgorithmId algo = new AlgorithmId(AlgorithmId.md5WithRSAEncryption_oid);
  info.set(X509CertInfo.ALGORITHM_ID, new CertificateAlgorithmId(algo));

  // Sign the cert to identify the algorithm that's used.
  X509CertImpl cert = new X509CertImpl(info);
  cert.sign(privkey, algorithm);

  // Update the algorith, and resign.
  algo = (AlgorithmId)cert.get(X509CertImpl.SIG_ALG);
  info.set(CertificateAlgorithmId.NAME + "." + CertificateAlgorithmId.ALGORITHM, algo);
  cert = new X509CertImpl(info);
  cert.sign(privkey, algorithm);

現在，我需要通過使用密鑰庫或其他方式來保存私鑰和公鑰，以便我可以檢索到那些用於簽署任何文件或對象的密鑰。 我嘗試使用簡單的文件流傳輸，但是它給了我錯誤，並且似乎不是正確的方法。 請指導我下一步該怎么做。 我想使用證書和私鑰對一些數據進行簽名，並且我想保存它們，以便我可以隨時使用驗證。

Answer 1

我找到了答案

   private  void savePublicKeyToFile(String fileName,
                                BigInteger mod, BigInteger exp) throws IOException {
     ObjectOutputStream oout = new ObjectOutputStream(
             new BufferedOutputStream(new FileOutputStream(fileName)));
     try {
         oout.writeObject(mod);
         oout.writeObject(exp);
     } catch (Exception e) {
        // throw new SomeException(e);
     } finally {
         oout.close();
     }
 }

  private  void savePrivteKeyToFile(String fileName,
                                BigInteger mod, BigInteger PublicExponent, BigInteger PrivateExponent,
            BigInteger PrimeP, BigInteger PrimeQ,BigInteger PrimeExponentP,BigInteger PrimeExponentQ,
            BigInteger CrtCoefficient) throws IOException {
     ObjectOutputStream oout = new ObjectOutputStream(
             new BufferedOutputStream(new FileOutputStream(fileName)));
     try {
         oout.writeObject(mod);
         oout.writeObject(PublicExponent);
         oout.writeObject(PrivateExponent);
         oout.writeObject(PrimeP);
         oout.writeObject(PrimeQ);
         oout.writeObject(PrimeExponentP);
         oout.writeObject(PrimeExponentQ);
         oout.writeObject(CrtCoefficient);
     } catch (Exception e) {
        // throw new SomeException(e);
     } finally {
         oout.close();
     }
 }


     // To save in keystore here is the way


     Certificate [] certChain = new Certificate[1];
    certChain[0] = ca;
    String strAlias = "abcalias", strPassword="mypass";
    KeyStore keyStore = KeyStore.getInstance("jks");
    keyStore.load(null,strPassword.toCharArray());
    keyStore.setEntry(strAlias,
       new KeyStore.PrivateKeyEntry((PrivateKey) KPair.getPrivate(), certChain),
       new KeyStore.PasswordProtection(strPassword.toCharArray()));

    FileOutputStream fkey = new FileOutputStream(strFilePath+".keystore"); 
    keyStore.store(fkey, strPassword.toCharArray());
    fkey.close();